Function at 0x460fee
Capabilities:
Get common file path
Get disk information
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10bc
call fcn.0049abc0
push ebx
push esi
lea eax, [ebp + 8]
push edi
push eax
mov dword [ebp - 0x28], ecx
call fcn.00439c95
pop ecx
push 5
lea ecx, [ebp - 0x18]
call fcn.0043fdb8
push 0x14
lea ecx, [ebp - 0x68]
call fcn.0043fdb8
lea ecx, [ebp - 0x54]
call fcn.0043fd9a
mov esi, dword [ebp + 8]
mov ax, word [esi]
xor ebx, ebx
cmp ax, 0x2d
mov dword [ebp - 4], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x34], ebx
mov cl, 0x2a
jne 0x46104b
mov cl, al
movsx edi, cl
movzx eax, ax
jmp 0x461198
push 3
lea eax, [ebp + 8]
inc esi
push eax
inc esi
push 0x4b8130
mov dword [ebp + 8], esi
call fcn.00439d66
add esp, 0xc
test eax, eax
je 0x46107e
mov dword [ebp - 4], 1
jmp 0x461192
push 6
lea eax, [ebp + 8]
push eax
push str.setvol
call fcn.00439d66
add esp, 0xc
test eax, eax
je 0x4610a1
mov dword [ebp - 4], 2
jmp 0x461192
push 4
lea eax, [ebp + 8]
push eax
push str.idle
call fcn.00439d66
add esp, 0xc
test eax, eax
je 0x4610c4
mov dword [ebp - 0x3c], 1
jmp 0x461192
push 5
lea eax, [ebp + 8]
push eax
push str.idlec
call fcn.00439d66
add esp, 0xc
test eax, eax
je 0x4610e7
mov dword [ebp - 0x3c], 2
jmp 0x461192
push 5
lea eax, [ebp + 8]
push eax
push str.rsort
call fcn.00439d66
add esp, 0xc
test eax, eax
je 0x46110a
mov dword [ebp - 0x38], 1
jmp 0x461192
push 2
pop esi
push esi
lea eax, [ebp + 8]
push eax
push 0x4b80f4
call fcn.00439d66
add esp, 0xc
test eax, eax
je 0x46112c
mov dword [ebp - 0x2c], 0x100
jmp 0x461192
push 3
lea eax, [ebp + 8]
push eax
push 0x4b80ec
call fcn.00439d66
add esp, 0xc
test eax, eax
je 0x46114c
mov dword [ebp - 8], 1
jmp 0x461192
push 4
lea eax, [ebp + 8]
push eax
push str.devs
call fcn.00439d66
add esp, 0xc
test eax, eax
je 0x461168
mov dword [ebp - 8], esi
jmp 0x461192
push 0xffffffffffffffff
lea eax, [ebp + 8]
push eax
push str.link_
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x461188
mov dword [ebp - 0x34], 1
jmp 0x461192
lea eax, [ebp + 8]
push eax
call fcn.00405444
pop ecx
mov esi, dword [ebp + 8]
movzx eax, word [esi]
cmp edi, eax
je 0x461056
push 0x3d
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004429d8
mov ecx, dword [ebp - 0x28]
add esp, 0xc
push ebx
lea eax, [ebp - 0x18]
push eax
call fcn.00402e5f
mov eax, dword [ebp + 8]
cmp word [eax], 0x3d
mov esi, eax
jne 0x4611e1
lea esi, [eax + 2]
push ebx
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp + 8]
push eax
mov dword [ebp + 8], esi
call fcn.004429d8
add esp, 0xc
mov eax, dword [ebp - 0x18]
cmp word [eax], bx
jne 0x4611f3
mov ebx, 0x80070057
jmp 0x461c2c
cmp dword [ebp - 4], 2
jne 0x46122b
push 2
lea ecx, [ebp - 0x18]
call fcn.0043fddf
mov eax, dword [ebp - 0x18]
push esi
mov word [eax + 2], 0x3a
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.DLL_SetVolumeLabelW]
test eax, eax
jne 0x461c2c
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
jmp 0x461c2c
mov eax, dword [ebp - 0x68]
cmp word [eax], 0x3f
jne 0x4612c4
push 0x400008
lea ecx, [ebp - 8]
call fcn.0043fdb8
mov esi, dword [ebp - 8]
mov edi, esi
push 0x1ffffe
add esi, 0x400008
push esi
mov eax, edi
mov dword [esi], ebx
push ebx
mov dword [eax], ebx
call dword [sym.imp.KERNEL32.DLL_QueryDosDeviceW]
cmp eax, ebx
mov dword [ebp - 0x2c], eax
lea edx, [esi + eax*2]
jle 0x46129e
cmp esi, edx
jae 0x46129e
push 2
pop ecx
jmp 0x46127d
mov word [edi], ax
add edi, ecx
xor eax, eax
mov ax, word [esi]
add esi, ecx
cmp ax, bx
jne 0x461276
cmp word [esi], bx
je 0x46129e
mov word [edi], 0xd
add edi, ecx
mov word [edi], 0xa
add edi, ecx
cmp esi, edx
jb 0x46127d
push dword [ebp - 8]
mov ecx, dword [ebp - 0x28]
mov word [edi], bx
push dword [ebp - 0x18]
call fcn.0043f62b
cmp dword [ebp - 0x2c], ebx
jg 0x4612bc
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
lea ecx, [ebp - 8]
jmp 0x461c27
push eax
call fcn.00411f27
cmp dword [ebp - 0x34], ebx
mov esi, eax
pop ecx
mov dword [ebp - 0x40], esi
je 0x461429
cmp word [esi], bx
je 0x46131f
mov ax, word [esi + 2]
cmp ax, bx
je 0x4612f3
cmp ax, 0x3a
jne 0x46131f
cmp word [esi + 4], bx
jne 0x46131f
mov word [ebp - 0x50], 0x5c
mov word [ebp - 0x4e], 0x3f
mov word [ebp - 0x4c], 0x3f
mov word [ebp - 0x4a], 0x5c
mov ax, word [esi]
mov word [ebp - 0x48], ax
mov word [ebp - 0x46], 0x3a
mov word [ebp - 0x44], bx
lea esi, [ebp - 0x50]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x10]
mov dword [ebp + 8], eax
call fcn.0043fd9a
lea ecx, [ebp - 4]
call fcn.0043fd9a
lea ecx, [ebp - 8]
call fcn.0043fd9a
push ebx
push 0x2c
pop edi
push edi
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004352a9
push ebx
push edi
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004352a9
push ebx
push edi
lea eax, [ebp - 8]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004352a9
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], ebx
mov cx, word [ecx]
mov ax, word [eax]
neg cx
lea edx, [ebp - 0x14]
sbb ecx, ecx
and ecx, edx
push ecx
mov cx, ax
neg cx
lea edx, [ebp - 0x30]
sbb ecx, ecx
and ecx, edx
neg ax
push ecx
lea ecx, [ebp - 0x20]
sbb eax, eax
and eax, ecx
push eax
push esi
call fcn.004132e4
mov esi, eax
mov eax, dword [ebp - 0x10]
add esp, 0x40
cmp word [eax], bx
je 0x4613c5
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
push eax
call fcn.0043f62b
mov eax, dword [ebp - 4]
cmp word [eax], bx
je 0x4613d9
push dword [ebp - 0x30]
mov ecx, dword [ebp - 0x28]
push eax
call fcn.0043f62b
mov eax, dword [ebp - 8]
cmp word [eax], bx
je 0x4613ed
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
push eax
call fcn.0043f62b
cmp esi, ebx
je 0x4613f9
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
lea ecx, [ebp - 0x14]
call fcn.00439cfd
lea ecx, [ebp - 0x30]
call fcn.00439cfd
lea ecx, [ebp - 0x20]
call fcn.00439cfd
lea ecx, [ebp - 8]
call fcn.00439cfd
lea ecx, [ebp - 4]
call fcn.00439cfd
lea ecx, [ebp - 0x10]
jmp 0x461c27
mov eax, esi
call fcn.00444ed1
mov edi, 0x517
push edi
lea ecx, [ebp - 0x24]
mov esi, eax
call fcn.0043fdb8
mov eax, dword [ebp - 0x24]
add eax, 0x61c
cmp dword [ebp - 8], ebx
mov dword [ebp - 0x34], eax
je 0x46151e
mov eax, dword [ebp - 0x24]
push edi
push eax
push esi
mov word [eax], bx
call dword [sym.imp.KERNEL32.DLL_QueryDosDeviceW]
cmp dword [ebp - 8], 2
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 4], eax
jl 0x4614fa
mov ecx, eax
xor esi, esi
mov dword [ebp + 8], ecx
cmp word [eax], bx
mov dword [ebp - 4], eax
je 0x4614fa
mov dx, word [ecx]
inc ecx
inc ecx
test dx, dx
mov dword [ebp + 8], ecx
jne 0x461485
inc esi
cmp word [ecx], bx
jne 0x461485
cmp esi, 1
jle 0x4614fa
sub ecx, eax
sar ecx, 1
lea edx, [ecx + esi]
cmp edx, edi
mov dword [ebp - 0x2c], ecx
jle 0x4614bd
add edx, 2
push edx
lea ecx, [ebp - 0x24]
call fcn.0043fddf
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
lea ecx, [eax + ecx*2 - 4]
mov dword [ebp + 8], ecx
lea ecx, [ecx + esi*2]
mov word [ecx], bx
jmp 0x4614f5
cmp ecx, dword [ebp + 8]
jbe 0x4614e8
mov eax, dword [ebp + 8]
mov dx, word [eax]
mov word [ecx], dx
sub dword [ebp + 8], 2
dec ecx
dec ecx
cmp dx, bx
jne 0x4614cf
mov word [ecx], 0xd
mov word [ecx + 2], 0xa
dec ecx
dec ecx
cmp ecx, dword [ebp + 8]
ja 0x4614d4
push dword [ebp - 4]
mov ecx, dword [ebp - 0x28]
push dword [ebp - 0x18]
call fcn.0043f62b
cmp dword [ebp - 0x38], ebx
jne 0x461c24
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
jmp 0x461c24
test byte [ebp - 4], 1
je 0x461b34
mov eax, dword [ebp - 0x24]
mov dword [eax], ebx
add eax, 0x412
mov dword [ebp - 0xc], eax
mov dword [eax], ebx
mov ax, word [esi]
cmp ax, bx
je 0x46156b
mov cx, word [esi + 2]
cmp cx, bx
je 0x461554
cmp cx, 0x3a
jne 0x46156b
cmp word [esi + 4], bx
jne 0x46156b
lea esi, [ebp - 0x50]
mov word [ebp - 0x50], ax
mov word [ebp - 0x4e], 0x3a
mov word [ebp - 0x4c], 0x5c
mov word [ebp - 0x4a], bx
push 0xc
push str._HarddiskVolume
push esi
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 8], 1
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
mov edi, 0x208
je 0x4615d1
push 0x104
push dword [ebp - 0xc]
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
push edi
push dword [ebp - 0x24]
push esi
call dword [sym.imp.KERNEL32.DLL_GetVolumeInformationW]
test eax, eax
je 0x4615c0
mov dword [ebp - 8], ebx
jmp 0x461657
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, ebx
mov dword [ebp - 8], eax
je 0x461657
mov eax, dword [ebp - 0xc]
push ebx
push 0x4c9154
push str.Kernel32.DLL
push str.GetVolumeInformationByHandleW
mov dword [eax], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
call fcn.0043afc7
add esp, 0x10
cmp dword [0x4c9154], ebx
je 0x461657
push ebx
push ebx
push 3
push ebx
push 7
push 0x80000000
push dword [ebp - 0x40]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
call fcn.004054c4
push 0x104
push dword [ebp - 0xc]
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
push edi
push dword [ebp - 0x24]
push dword [ebp - 0x14]
call dword [0x4c9154]
test eax, eax
je 0x461646
mov dword [ebp - 8], ebx
jmp 0x46164f
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x14]
call fcn.00402c5b
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x3c]
mov dword [ebp + 8], eax
call fcn.0043fd9a
lea ecx, [ebp - 0x34]
call fcn.0043fd9a
lea ecx, [ebp - 0x40]
call fcn.0043fd9a
lea ecx, [ebp - 0x64]
call fcn.0043fd9a
lea ecx, [ebp - 0x60]
call fcn.0043fd9a
lea ecx, [ebp - 0x14]
call fcn.0043fd9a
push 0x2c
pop edi
push edi
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004429d8
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x461736
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004429d8
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x461736
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004429d8
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x461736
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004429d8
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x461736
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004429d8
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x461736
add dword [ebp + 8], 2
push edi
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004429d8
add esp, 0xc
mov eax, dword [ebp - 0x14]
cmp word [eax], bx
je 0x461aae
push dword [ebp - 0xc]
mov edi, dword [sym.imp.KERNEL32.DLL_lstrcmpW]
or dword [ebp - 0x10], 0xffffffff
push 0x4b4a90
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], 0x200
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x20], str._02X_02X__02X_02X
mov word [ebp - 0x10bc], bx
mov dword [ebp - 0x1070], ebx
mov dword [ebp - 0x106c], ebx
call edi
test eax, eax
je 0x461888
push dword [ebp - 0xc]
push str.FAT16
call edi
test eax, eax
je 0x461888
push dword [ebp - 0xc]
push str.FAT32
call edi
test eax, eax
jne 0x4617b5
mov dword [ebp - 0x10], 0x43
jmp 0x46188f
push dword [ebp - 0xc]
push str.ExFAT
call dword [sym.imp.KERNEL32.DLL_lstrcmpiW]
test eax, eax
jne 0x4617d3
mov dword [ebp - 0x10], 0x64
jmp 0x46188f
push dword [ebp - 0xc]
push 0x4b4a6c
call edi
test eax, eax
jne 0x4617fb
mov dword [ebp - 0x10], 0x48
mov dword [ebp - 4], 2
mov dword [ebp - 0x20], str._02X_02X_02X_02X_02X_02X_02X_02X
jmp 0x46188f
push 3
push dword [ebp - 0xc]
push str.EXT2
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x46183a
mov eax, dword [ebp - 0xc]
movzx eax, word [eax + 6]
push eax
call fcn.0043f865
add esp, 4
test al, al
je 0x46183a
mov dword [ebp - 0x10], 0x468
mov dword [ebp - 4], 3
mov dword [ebp - 0x20], str._02x_02x_02x_02x__02x_02x__02x_02x__02x_02x__02x_02x_02x_02x_02x_02x
jmp 0x46188f
push dword [ebp - 0xc]
push str.CDFS
call edi
test eax, eax
je 0x46186a
push dword [ebp - 0xc]
push 0x4b7f70
call edi
test eax, eax
je 0x46186a
push 3
push dword [ebp - 0xc]
push str.ISO9600
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x46188f
mov dword [ebp - 0x38], 0x800
mov dword [ebp - 0x10], 0x833e
mov dword [ebp - 4], 4
mov dword [ebp - 0x20], str._02x_02x__02x__02x__02x__02x__02x__02x
jmp 0x46188f
mov dword [ebp - 0x10], 0x27
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
dec eax
cmp eax, ebx
jle 0x4618da
push 0x5c
pop ecx
cmp word [esi + eax*2], cx
jne 0x4618a9
mov word [esi + eax*2], bx
dec eax
cmp eax, ebx
jle 0x4618da
cmp word [esi + 2], 0x3a
jne 0x4618da
mov ax, word [esi]
lea esi, [ebp - 0x50]
mov word [ebp - 0x4a], cx
mov word [ebp - 0x4e], cx
mov word [ebp - 0x50], cx
mov word [ebp - 0x4c], 0x2e
mov word [ebp - 0x48], ax
mov word [ebp - 0x46], 0x3a
mov word [ebp - 0x44], bx
push ebx
push 0x80
push 3
push ebx
push 7
push 0x80000000
push esi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], ebx
call fcn.004054c4
mov esi, dword [ebp - 0x38]
cmp dword [ebp - 0x10], esi
jl 0x461916
mov eax, dword [ebp - 0x10]
cdq
idiv esi
push ebx
imul eax, esi
cdq
push edx
push eax
push dword [ebp - 0x30]
call fcn.0043ae64
add esp, 0x10
push ebx
lea eax, [ebp - 0x2c]
push eax
push esi
lea eax, [ebp - 0x1070]
push eax
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.DLL_ReadFile]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp dword [ebp - 0x2c], ebx
je 0x461a94
mov eax, dword [ebp - 0x10]
cdq
idiv esi
cmp dword [ebp - 4], 4
lea esi, [ebp + edx - 0x1070]
jne 0x461970
mov edi, esi
push 8
lea esi, [ebp - 0x1084]
mov eax, esi
push ebx
push eax
mov byte [edi + 0x10], bl
call fcn.0049a7e0
mov eax, esi
push eax
push edi
call fcn.00444f69
add esp, 0x14
mov eax, dword [ebp - 4]
cmp eax, 1
jg 0x4619a3
movzx eax, byte [esi]
push eax
movzx eax, byte [esi + 1]
push eax
movzx eax, byte [esi + 2]
push eax
movzx eax, byte [esi + 3]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x10bc]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
jmp 0x461a94
cmp eax, 2
jne 0x4619e7
movzx eax, byte [esi]
push eax
movzx eax, byte [esi + 1]
push eax
movzx eax, byte [esi + 2]
push eax
movzx eax, byte [esi + 3]
push eax
movzx eax, byte [esi + 4]
push eax
movzx eax, byte [esi + 5]
push eax
movzx eax, byte [esi + 6]
push eax
movzx eax, byte [esi + 7]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x10bc]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
jmp 0x461a94
cmp eax, 3
jne 0x461a50
movzx eax, byte [esi + 0xf]
push eax
movzx eax, byte [esi + 0xe]
push eax
movzx eax, byte [esi + 0xd]
push eax
movzx eax, byte [esi + 0xc]
push eax
movzx eax, byte [esi + 0xb]
push eax
movzx eax, byte [esi + 0xa]
push eax
movzx eax, byte [esi + 9]
push eax
movzx eax, byte [esi + 8]
push eax
movzx eax, byte [esi + 7]
push eax
movzx eax, byte [esi + 6]
push eax
movzx eax, byte [esi + 5]
push eax
movzx eax, byte [esi + 4]
push eax
movzx eax, byte [esi + 3]
push eax
movzx eax, byte [esi + 2]
push eax
movzx eax, byte [esi + 1]
push eax
movzx eax, byte [esi]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x10bc]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x48
jmp 0x461a94
cmp eax, 4
jne 0x461a94
movzx eax, byte [esi + 8]
push eax
movzx eax, byte [esi + 7]
push eax
movzx eax, byte [esi + 6]
push eax
movzx eax, byte [esi + 5]
push eax
movzx eax, byte [esi + 4]
push eax
movzx eax, byte [esi + 3]
push eax
movzx eax, byte [esi + 2]
push eax
movzx eax, byte [esi + 1]
push eax
movzx eax, byte [esi]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x10bc]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x2c
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x10bc]
push eax
push dword [ebp - 0x14]
call fcn.0043f62b
lea ecx, [ebp - 0x30]
call fcn.00402c5b
push dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
push dword [ebp - 0x3c]
mov ecx, esi
call fcn.0043f62b
push str._08lX
push dword [ebp - 0x34]
push dword [ebp - 0x70]
push esi
call fcn.004421df
push dword [ebp - 0x40]
push dword [ebp - 0x58]
push esi
call fcn.00442209
push str.0x_lX
push dword [ebp - 0x60]
push dword [ebp - 0x5c]
push esi
call fcn.004421df
add esp, 0x2c
push dword [ebp - 0xc]
mov ecx, esi
push dword [ebp - 0x64]
call fcn.0043f62b
lea ecx, [ebp - 0x14]
call fcn.00439cfd
lea ecx, [ebp - 0x60]
call fcn.00439cfd
lea ecx, [ebp - 0x64]
call fcn.00439cfd
lea ecx, [ebp - 0x40]
call fcn.00439cfd
lea ecx, [ebp - 0x34]
call fcn.00439cfd
lea ecx, [ebp - 0x3c]
call fcn.00439cfd
mov ebx, dword [ebp - 8]
jmp 0x461c24
mov dword [ebp + 8], esi
cmp word [esi], bx
mov byte [ebp - 0x19], 1
jne 0x461b44
mov cl, 0x7c
jmp 0x461b6b
push esi
push 0x4b7f0c
call fcn.0043af97
test al, al
pop ecx
pop ecx
jne 0x461b69
push esi
push 0x4b450c
call fcn.0043af97
test al, al
pop ecx
pop ecx
je 0x461b90
mov byte [ebp - 0x19], bl
mov cl, 0x20
mov eax, dword [ebp - 0x2c]
or eax, dword [ebp - 0x38]
push eax
movsx eax, byte [ebp - 0x19]
push dword [ebp - 0x3c]
push eax
movsx ax, cl
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0044cfb9
add esp, 0x14
jmp 0x461c18
cmp word [esi + 2], 0x3a
jne 0x461b9f
mov eax, esi
mov word [esi + 4], bx
jmp 0x461c18
mov esi, dword [ebp - 0x34]
push esi
push 0x208
mov word [esi], bx
call dword [sym.imp.KERNEL32.DLL_GetCurrentDirectoryW]
mov ecx, dword [ebp + 8]
push 0x5c
pop edi
cmp word [ecx], di
jne 0x461bfb
cmp word [ecx + 2], di
jne 0x461bfb
cmp word [ecx + 4], 0x3f
jne 0x461bfb
cmp word [ecx + 6], di
jne 0x461bfb
mov eax, ecx
add ecx, 8
mov dword [ebp + 8], ecx
mov dx, word [ecx]
cmp dx, bx
je 0x461c18
cmp dx, di
je 0x461bf1
inc ecx
inc ecx
mov dword [ebp + 8], ecx
mov dx, word [ecx]
cmp dx, bx
jne 0x461bdf
cmp word [ecx], bx
je 0x461c18
mov word [ecx], bx
jmp 0x461c18
push 5
lea ecx, [ebp - 0x54]
call fcn.0043fddf
mov cx, word [esi]
mov eax, dword [ebp - 0x54]
mov word [eax], cx
mov word [eax + 2], 0x3a
mov word [eax + 4], bx
mov ecx, dword [ebp - 0x28]
push eax
push dword [ebp - 0x18]
call fcn.0043f62b
lea ecx, [ebp - 0x24]
call fcn.00439cfd
lea ecx, [ebp - 0x54]
call fcn.00439cfd
lea ecx, [ebp - 0x68]
call fcn.00439cfd
lea ecx, [ebp - 0x18]
call fcn.00439cfd
pop edi
pop esi
mov eax, ebx
pop ebx
leave
ret 8