Function at 0x468920
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
mov eax, 0x6084
call fcn.0047a5c0
mov dl, byte [0x4d7690]
push ebx
push ebp
push esi
push edi
mov ecx, 0x3ff
xor eax, eax
lea edi, [esp + 0x4095]
mov byte [esp + 0x4094], dl
mov byte [esp + 0x1094], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x3ff
xor eax, eax
lea edi, [esp + 0x1095]
push 0x1000
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x3098]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x468991
mov byte [esp + 0x94], al
mov byte [esp + 0x5094], al
jmp 0x4689be
lea ecx, [esp + 0x3094]
lea edx, [esp + 0x5094]
push ecx
push edx
call fcn.00463740
lea eax, [esp + 0x309c]
lea ecx, [esp + 0x9c]
push eax
push ecx
call fcn.00463780
add esp, 0x10
push 8
lea edx, [esp + 0x98]
push str.DNCAdmin
push edx
call dword [sym.imp.MSVCRT.dll__strnicmp]
mov ebp, dword [sym.imp.MSVCRT.dll__stricmp]
add esp, 0xc
test eax, eax
jne 0x468a23
lea eax, [esp + 0x5094]
lea ecx, [esp + 0x94]
push eax
push ecx
call fcn.00463780
mov edi, str.CfgDNCAdm.INI
or ecx, 0xffffffff
xor eax, eax
add esp, 8
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x4094]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x468a55
lea ecx, [esp + 0x94]
push str.CIMCOEdit.exe
push ecx
call ebp
add esp, 8
test eax, eax
jne 0x468b7d
lea edx, [esp + 0x5094]
lea eax, [esp + 0x94]
push edx
push eax
call fcn.00463780
add esp, 8
mov al, byte [esp + 0x94]
test al, al
je 0x468a94
mov al, byte [esp + 0x4094]
test al, al
jne 0x468aa3
mov edi, str.CfgCIMCO.INI
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x4094]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov al, byte [esp + 0x4094]
test al, al
je 0x469266
lea ecx, [esp + 0x4094]
lea edx, [esp + 0x5094]
push ecx
push edx
lea eax, [esp + 0x109c]
push 0x4d1784
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push str.Shell32.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, dword [esp + 0x6098]
mov esi, eax
mov al, byte [esp + 0x94]
test al, al
mov byte [ebx], 0
je 0x468b60
test esi, esi
je 0x468b60
push str.SHGetSpecialFolderPathA
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x468b08
push 1
push 0x1a
push ebx
push 0
call eax
cmp byte [ebx], 0
je 0x468b59
lea ecx, [esp + 0x94]
mov edi, ebx
push ecx
or ecx, 0xffffffff
xor eax, eax
push 0x4d4188
repne scasb al, byte es:[edi]
not ecx
dec ecx
push str._s_s
add ecx, ebx
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
push ebx
call fcn.004674c0
add esp, 0x14
test al, al
jne 0x468b4a
push ebx
call fcn.00467500
add esp, 4
push ebx
call fcn.004674c0
add esp, 4
test al, al
jne 0x468b59
mov byte [ebx], al
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [ebx], 0
jne 0x468cd9
push ebx
call fcn.004688d0
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6084
ret
lea ecx, [esp + 0x94]
push str.DLoGEdit.exe
push ecx
call ebp
add esp, 8
test eax, eax
jne 0x468bb0
push 5
push str.DLoG_proNCE__d
lea edx, [esp + 0x9c]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
jmp 0x468a55
lea eax, [esp + 0x94]
push str.SuperdraftEdit.exe
push eax
call ebp
add esp, 8
test eax, eax
jne 0x468be3
push 5
lea ecx, [esp + 0x98]
push str.Superdraft_Edit__d
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
jmp 0x468a55
lea edx, [esp + 0x94]
push str.ZKEdit.exe
push edx
call ebp
add esp, 8
test eax, eax
jne 0x468c16
push 5
lea eax, [esp + 0x98]
push str.ZimmerKreim_Edit__d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
jmp 0x468a55
lea ecx, [esp + 0x94]
push str.DCAMEdit.exe
push ecx
call ebp
add esp, 8
test eax, eax
jne 0x468c38
push 5
push str.DCAM_Edit__d
jmp 0x468b9a
lea eax, [esp + 0x94]
push str.HSMWorksEdit.exe
push eax
call ebp
add esp, 8
test eax, eax
jne 0x468c6b
push 5
lea ecx, [esp + 0x98]
push str.HSMWorks_Edit__d
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
jmp 0x468a55
lea edx, [esp + 0x94]
push str.SolidCAMEdit.exe
push edx
call ebp
add esp, 8
test eax, eax
jne 0x468c9e
push 5
lea eax, [esp + 0x98]
push str.SolidCAM_Edit__d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
jmp 0x468a55
lea ecx, [esp + 0x94]
push str.Editwell2005.exe
push ecx
call ebp
add esp, 8
test eax, eax
jne 0x468ccc
lea edx, [esp + 0x94]
push str.Editwell_2005
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
jmp 0x468a52
mov byte [esp + 0x94], 0
jmp 0x468a94
lea edx, [esp + 0x1094]
lea eax, [esp + 0x3094]
push edx
push 0x1000
push eax
push 0x4d3618
push str.USERCFG
push str.INIFILEVERSION
call fcn.0046a540
add esp, 0x18
lea ecx, [esp + 0x3094]
push 0x4d3614
push ecx
call fcn.00462680
add esp, 4
push eax
call ebp
add esp, 8
test eax, eax
je 0x468f60
lea edx, [esp + 0x3094]
push 0x4d1378
push edx
call ebp
add esp, 8
test eax, eax
je 0x468f60
lea eax, [esp + 0x1094]
mov byte [esp + 0x13], 1
push eax
call fcn.004674e0
add esp, 4
test al, al
jne 0x468db6
lea ecx, [esp + 0x1094]
lea edx, [esp + 0x3094]
push ecx
push edx
call fcn.00463740
lea eax, [esp + 0x309c]
push eax
call fcn.00467500
mov ecx, 0x1e
mov esi, str._r_n_INIFILEVERSION__r_n_r_n_INIFILEVERSION__r_nVERSION_t_t_200_r_n
lea edi, [esp + 0x28]
push 0x4d144c
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x10a4]
push ecx
call dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
add esp, 0x14
test esi, esi
je 0x468ec3
lea edx, [esp + 0x1c]
jmp 0x468f0e
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0x80
push 3
push 0
push 0
lea edx, [esp + 0x10a8]
push 0x80000000
push edx
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x468ec3
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebp, eax
test ebp, ebp
jbe 0x468ed7
lea eax, [ebp + 2]
push eax
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], eax
push 0
push ecx
push ebp
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x468ec3
cmp dword [esp + 0x14], ebp
jne 0x468ec3
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call ebx
push 0
push 0x80
push 2
push 0
push 0
lea edx, [esp + 0x10a8]
push 0x40000000
push edx
call edi
mov esi, eax
cmp esi, 0xffffffff
jne 0x468e8a
lea eax, [esp + 0x1094]
push 0
push eax
call fcn.0046af10
add esp, 8
lea ecx, [esp + 0x1094]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push ecx
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x468ebc
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x18]
push 0
push edx
push ebp
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x468ead
cmp dword [esp + 0x18], ebp
jne 0x468ead
mov byte [esp + 0x13], 0
push esi
call ebx
mov al, byte [esp + 0x13]
test al, al
je 0x46924b
mov ebx, dword [esp + 0x6098]
push ebx
call fcn.00462d50
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6084
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x1e
mov esi, str._r_n_INIFILEVERSION__r_n_r_n_INIFILEVERSION__r_nVERSION_t_t_200_r_n
lea edi, [esp + 0x1c]
push 0x4d144c
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x1098]
push ecx
call dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
add esp, 8
test esi, esi
je 0x468ec3
lea edx, [esp + 0x1c]
push edx
push esi
call dword [sym.imp.MSVCRT.dll_fprintf]
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
lea eax, [esp + 0x10a0]
push eax
call fcn.004674e0
add esp, 0x10
test al, al
je 0x468ec3
lea ecx, [esp + 0x1094]
push 0
push ecx
call fcn.00468840
add esp, 8
cmp eax, 0xa
jbe 0x468ec3
push ebx
call fcn.004688d0
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6084
ret
lea edx, [esp + 0x1094]
lea eax, [esp + 0x3094]
push edx
push 0x1000
push eax
push 0x4d7690
push str.PATHCFG
push str.INIFILEVERSION
call fcn.0046a540
lea ecx, [esp + 0x10ac]
push 1
lea edx, [esp + 0x30b0]
push ecx
push edx
push str.PATHCFG
push str.INIFILEVERSION
call fcn.00469520
mov al, byte [esp + 0x30c0]
add esp, 0x2c
test al, al
mov byte [esp + 0x13], 0
je 0x468ec3
lea eax, [esp + 0x4094]
lea ecx, [esp + 0x94]
push eax
lea edx, [esp + 0x3098]
push ecx
push edx
lea eax, [esp + 0x20a0]
push str._s_s_s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
lea ecx, [esp + 0x20a8]
push ecx
call fcn.004674e0
add esp, 0x18
test al, al
jne 0x46905b
lea edx, [esp + 0x2094]
lea eax, [esp + 0x3094]
push edx
push eax
call fcn.00463740
lea ecx, [esp + 0x309c]
push ecx
call fcn.00467500
mov ecx, 0x1e
mov esi, str._r_n_INIFILEVERSION__r_n_r_n_INIFILEVERSION__r_nVERSION_t_t_200_r_n
lea edi, [esp + 0x28]
lea edx, [esp + 0x20a0]
push 0x4d144c
push edx
rep movsd dword es:[edi], dword [esi]
call dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
add esp, 0x14
test esi, esi
je 0x468ec3
lea eax, [esp + 0x1c]
jmp 0x469204
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0x80
push 3
push 0
push 0
lea eax, [esp + 0x20a8]
push 0x80000000
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x468ec3
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebp, eax
test ebp, ebp
jbe 0x4691c9
lea ecx, [ebp + 2]
push ecx
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
lea edx, [esp + 0x18]
mov dword [esp + 0x14], eax
push 0
push edx
push ebp
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x468ec3
cmp dword [esp + 0x18], ebp
jne 0x468ec3
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call ebx
push 0
push 0x80
push 2
push 0
push 0
lea eax, [esp + 0x20a8]
push 0x40000000
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
jne 0x469133
lea ecx, [esp + 0x2094]
push 0
push ecx
call fcn.0046af10
add esp, 8
lea edx, [esp + 0x2094]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push edx
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x468ebc
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x14]
push 0
push eax
push ebp
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x469156
cmp dword [esp + 0x14], ebp
jne 0x469156
mov byte [esp + 0x13], 1
push esi
call ebx
mov al, byte [esp + 0x13]
test al, al
je 0x468ebc
mov ebx, dword [esp + 0x6098]
lea eax, [esp + 0x94]
lea ecx, [esp + 0x3094]
push eax
push ecx
lea edx, [esp + 0x209c]
push 0x4d1784
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
lea edi, [esp + 0x20a4]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov eax, ecx
mov edi, ebx
mov edx, edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00462d50
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6084
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x1e
mov esi, str._r_n_INIFILEVERSION__r_n_r_n_INIFILEVERSION__r_nVERSION_t_t_200_r_n
lea edi, [esp + 0x1c]
lea edx, [esp + 0x2094]
push 0x4d144c
push edx
rep movsd dword es:[edi], dword [esi]
call dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
add esp, 8
test esi, esi
je 0x468ec3
lea eax, [esp + 0x1c]
push eax
push esi
call dword [sym.imp.MSVCRT.dll_fprintf]
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
lea ecx, [esp + 0x20a0]
push ecx
call fcn.004674e0
add esp, 0x10
test al, al
je 0x468ec3
lea edx, [esp + 0x2094]
push 0
push edx
call fcn.00468840
add esp, 8
cmp eax, 0xa
jbe 0x468ec3
jmp 0x46916c
mov ebx, dword [esp + 0x6098]
push ebx
call fcn.004688d0
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6084
ret
lea edi, [esp + 0x5094]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [esp + 0x6098]
mov edx, ecx
mov eax, edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6084
ret