Function at 0x4089b0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x46fd43
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x440
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x18], ecx
push 1
mov dword [esp + 0x45c], 0
call fcn.00463d8c
mov esi, eax
mov eax, dword [0x48fb24]
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
lea eax, [esp + 0x30]
mov byte [esp + 0x458], 2
push eax
call fcn.00461c3d
mov ecx, dword [eax]
push 0
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x30]
call fcn.00461c50
mov ebx, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x30]
call fcn.00461c50
mov edi, dword [eax + 0x10]
push 0
lea ecx, [esp + 0x30]
inc edi
call fcn.00461c50
mov ebp, dword [eax + 0x14]
push 0
lea ecx, [esp + 0x30]
add ebp, 0x76c
call fcn.00461c50
mov edx, dword [eax]
push 0
lea ecx, [esp + 0x30]
mov dword [esp + 0x28], edx
call fcn.00461c50
mov eax, dword [eax + 4]
push 0
lea ecx, [esp + 0x30]
mov dword [esp + 0x24], eax
call fcn.00461c50
mov ecx, dword [eax + 8]
mov al, byte [0x493bc0]
test al, al
mov dword [esp + 0x28], ecx
jne 0x4091bc
mov edx, dword [esp + 0x18]
push ebx
push edi
push ebp
mov eax, dword [edx + 0x64]
push str.HistoryHistory_
push eax
lea ecx, [esp + 0x28]
push str._s_s_4d_02d_02d.Debughty
push ecx
call fcn.00461a66
add esp, 0x1c
lea ecx, [esp + 0x34]
call fcn.00443f37
mov edx, dword [esp + 0x460]
push 0x48b2bc
push edx
mov byte [esp + 0x460], 3
call fcn.0044bf3e
add esp, 8
test eax, eax
jne 0x408c70
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
push eax
push ecx
push edx
push ebx
push edi
push ebp
lea eax, [esp + 0x28]
push str._4d____02d____02d__02d:_02d:_02d___Application_Normally_Open__MultiDataLog___r_n
push eax
call fcn.00461a66
add esp, 0x1c
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x464], 4
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404eb0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
push str.11:27:05
push str.Oct_11_2022
push 0x491f08
push 0x81
push 2
push ecx
push edx
push eax
push ebx
push edi
push ebp
lea ecx, [esp + 0x3c]
push str._4d____02d____02d__02d:_02d:_02d_ExtFTP_V_d._02x_s____s__s____r_n
push ecx
call fcn.00461a66
add esp, 0x30
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], 5
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404dd0
mov ecx, dword [0x491f50]
push 0x48b7d0
push ecx
call fcn.0044c25e
mov edi, eax
lea edx, [esp + 0x58]
push edi
push 0x400
push edx
call fcn.0044c17c
add esp, 0x14
test eax, eax
je 0x408c62
mov bl, 6
lea eax, [esp + 0x50]
lea ecx, [esp + 0x10]
push eax
push 0x48b480
push ecx
call fcn.00461a66
add esp, 0xc
lea ecx, [esp + 0x10]
call fcn.00461b07
lea ecx, [esp + 0x10]
call fcn.00461abb
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x10]
push edx
push str._s__r_n
push eax
call fcn.00461a66
add esp, 8
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], bl
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404dd0
push edi
lea ecx, [esp + 0x54]
push 0x400
push ecx
call fcn.0044c17c
add esp, 0xc
test eax, eax
jne 0x408bd0
push edi
call fcn.0044c12b
add esp, 4
jmp 0x4091a2
mov edx, dword [esp + 0x460]
push str.CLOSE
push edx
call fcn.0044bf3e
add esp, 8
test eax, eax
jne 0x408d25
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
push eax
push ecx
push edx
push ebx
push edi
push ebp
lea eax, [esp + 0x28]
push str._4d____02d____02d__02d:_02d:_02d___Application_Normally_Close__MultiDataLog___r_n
push eax
call fcn.00461a66
mov ecx, dword [esp + 0x34]
add esp, 0x20
push 0
push ecx
lea ecx, [esp + 0x3c]
call fcn.00443ffa
push ecx
test eax, eax
mov ecx, esp
jne 0x408d03
lea edx, [esp + 0x14]
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], 7
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404eb0
jmp 0x4091a2
lea edx, [esp + 0x14]
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
mov byte [esp + 0x460], 8
mov ecx, esp
mov dword [esp + 0x20], esp
jmp 0x409189
mov ecx, dword [esp + 0x460]
push str.LOAD
push ecx
call fcn.0044bf3e
add esp, 8
test eax, eax
jne 0x408f2d
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
push edx
push eax
push ecx
push ebx
push edi
push ebp
lea edx, [esp + 0x28]
push str._4d____02d____02d__02d:_02d:_02d___Application_Normally_Open__MultiDataLog___r_n
push edx
call fcn.00461a66
mov eax, dword [esp + 0x34]
add esp, 0x20
lea ecx, [esp + 0x34]
push 0
push eax
call fcn.00443ffa
push ecx
test eax, eax
mov ecx, esp
jne 0x408db5
lea edx, [esp + 0x14]
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], 9
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404eb0
jmp 0x408deb
lea edx, [esp + 0x14]
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], 0xa
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404dd0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
push str.11:27:05
push str.Oct_11_2022
push 0x491f08
push 0x81
push 2
push ecx
push edx
push eax
push ebx
push edi
push ebp
lea ecx, [esp + 0x3c]
push str._4d____02d____02d__02d:_02d:_02d_ExtFTP_V_d._02x_s____s__s____r_n
push ecx
call fcn.00461a66
add esp, 0x30
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], 0xb
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404dd0
mov ecx, dword [0x491f50]
push 0x48b7d0
push ecx
call fcn.0044c25e
mov edi, eax
lea edx, [esp + 0x58]
push edi
push 0x400
push edx
call fcn.0044c17c
add esp, 0x14
test eax, eax
je 0x408f1f
mov bl, 0xc
lea eax, [esp + 0x50]
lea ecx, [esp + 0x10]
push eax
push 0x48b480
push ecx
call fcn.00461a66
add esp, 0xc
lea ecx, [esp + 0x10]
call fcn.00461b07
lea ecx, [esp + 0x10]
call fcn.00461abb
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x10]
push edx
push str._s__r_n
push eax
call fcn.00461a66
add esp, 8
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], bl
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404dd0
push edi
lea ecx, [esp + 0x54]
push 0x400
push ecx
call fcn.0044c17c
add esp, 0xc
test eax, eax
jne 0x408e8d
push edi
call fcn.0044c12b
add esp, 4
jmp 0x4091a2
mov al, byte [esp + 0x464]
test al, al
je 0x408f66
mov edx, dword [esp + 0x460]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x2c]
push eax
push ecx
push edx
push ebx
push edi
push ebp
lea eax, [esp + 0x2c]
push str._4d____02d____02d__02d:_02d:_02d___s__r_n
push eax
call fcn.00461a66
add esp, 0x24
jmp 0x408f80
mov ecx, dword [esp + 0x460]
lea edx, [esp + 0x10]
push ecx
push str._s__r_n
push edx
call fcn.00461a66
add esp, 0xc
mov eax, dword [esp + 0x14]
push 0
push eax
lea ecx, [esp + 0x3c]
call fcn.00443ffa
push ecx
test eax, eax
mov ecx, esp
jne 0x40916c
lea edx, [esp + 0x14]
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], 0xd
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404eb0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
push ecx
push edx
push eax
push ebx
push edi
push ebp
lea ecx, [esp + 0x28]
push str._4d____02d____02d__02d:_02d:_02d___New_File___r_n
push ecx
call fcn.00461a66
add esp, 0x1c
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], 0xe
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404dd0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
push str.11:27:05
push str.Oct_11_2022
push 0x491f08
push 0x81
push 2
push ecx
push edx
push eax
push ebx
push edi
push ebp
lea ecx, [esp + 0x3c]
push str._4d____02d____02d__02d:_02d:_02d_ExtFTP_V_d._02x_s____s__s____r_n
push ecx
call fcn.00461a66
add esp, 0x30
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], 0xf
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404dd0
push 0x48b7d0
mov ecx, dword [0x491f50]
push ecx
call fcn.0044c25e
mov edi, eax
lea edx, [esp + 0x58]
push edi
push 0x400
push edx
call fcn.0044c17c
add esp, 0x14
test eax, eax
je 0x409161
mov bl, 0x10
lea eax, [esp + 0x50]
lea ecx, [esp + 0x10]
push eax
push 0x48b480
push ecx
call fcn.00461a66
add esp, 0xc
lea ecx, [esp + 0x10]
call fcn.00461b07
lea ecx, [esp + 0x10]
call fcn.00461abb
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x10]
push edx
push str._s__r_n
push eax
call fcn.00461a66
add esp, 8
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x464], bl
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404dd0
push edi
lea ecx, [esp + 0x54]
push 0x400
push ecx
call fcn.0044c17c
add esp, 0xc
test eax, eax
jne 0x4090cf
push edi
call fcn.0044c12b
add esp, 4
jmp 0x4091a2
lea edx, [esp + 0x14]
mov dword [esp + 0x20], esp
push edx
call fcn.0046260d
push ecx
mov byte [esp + 0x460], 0x11
mov ecx, esp
mov dword [esp + 0x20], esp
lea eax, [esp + 0x1c]
push eax
call fcn.0046260d
mov ecx, esi
mov byte [esp + 0x460], 3
call fcn.00404dd0
push esi
call fcn.00463db5
add esp, 4
lea ecx, [esp + 0x34]
mov byte [esp + 0x458], 2
call fcn.00443f74
lea ecx, [esp + 0x10]
mov byte [esp + 0x458], 1
call fcn.00462898
lea ecx, [esp + 0x14]
mov byte [esp + 0x458], 0
call fcn.00462898
lea ecx, [esp + 0x460]
mov dword [esp + 0x458], 0xffffffff
call fcn.00462898
mov ecx, dword [esp + 0x450]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x44c
ret 8