Function at 0x418abe
Capabilities:
Read file via mapping

Disassembly:
mov eax, 0x6053b8
call fcn.00465b38
sub esp, 0x218
push ebx
xor ebx, ebx
cmp dword [0x6a3388], ebx
push esi
push edi
mov dword [ebp - 0x18], ecx
mov edi, str.oeaviewer
mov esi, 0x6a2af4
je 0x418b02
push dword [ecx + 0x1dc]
push dword [ebp + 8]
push str.COEAViewerApp::GetLocalClientIDEx_dwVerNo__d___m_bClientIDAllInit__d__0
push edi
push 1
push esi
call fcn.004cdcb0
add esp, 0x18
cmp dword [0x6a9080], ebx
je 0x418b14
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x418b02
cmp dword [0x6a3388], ebx
je 0x418b30
push dword [ebp + 8]
push str.COEAViewerApp::GetLocalClientIDEx_dwVerNo__d__1
push edi
push 1
push esi
call fcn.004cdcb0
add esp, 0x14
cmp dword [ebp + 8], ebx
jne 0x418b49
mov ecx, dword [ebp + 0xc]
push section.OEAXView
call fcn.005ecf4f
mov ebx, 0x6a9040
jmp 0x418b57
mov ecx, dword [ebp + 0xc]
mov ebx, 0x6a9040
push ebx
call fcn.005ecf4f
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
cmp dword [eax - 8], 0
je 0x418b6a
push 1
pop eax
jmp 0x418f70
cmp dword [0x6a3388], 0
je 0x418b87
push dword [ebp + 8]
push str.COEAViewerApp::GetLocalClientIDEx_dwVerNo__d__2
push edi
push 1
push esi
call fcn.004cdcb0
add esp, 0x14
push dword [0x66b7c8]
push 0
push 4
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x418d8d
push eax
push eax
push eax
push 4
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ebx, eax
test ebx, ebx
je 0x418d7a
cmp dword [0x6a3388], 0
je 0x418bd9
push dword [ebx]
push str.COEAViewerApp::GetLocalClientIDEx_dwVersion_d
push edi
push 1
push esi
call fcn.004cdcb0
add esp, 0x14
cmp dword [ebx], 2
jne 0x418d73
lea eax, [ebx + 4]
lea ecx, [ebp - 0x10]
push eax
call fcn.0047a930
mov eax, dword [ebp - 0x10]
and dword [ebp - 4], 0
cmp dword [eax - 8], 0
jne 0x418c0a
lea eax, [ebx + 0x104]
lea ecx, [ebp - 0x10]
push eax
call fcn.0047b5a0
push 0x40
push 0
push section.OEAXView
call fcn.00466010
push 0x40
push dword [ebp - 0x10]
push section.OEAXView
call fcn.00466960
add esp, 0x18
cmp dword [ebp + 8], 0
jne 0x418c3b
push dword [ebp - 0x10]
mov ecx, dword [ebp + 0xc]
call fcn.005ecf4f
lea eax, [ebx + 0x104]
lea ecx, [ebp - 0x10]
push eax
call fcn.0047b5a0
push 0x40
push 0
push 0x6a9040
call fcn.00466010
push 0x40
push dword [ebp - 0x10]
push 0x6a9040
call fcn.00466960
add esp, 0x18
cmp dword [ebp + 8], 1
jne 0x418c7b
push dword [ebp - 0x10]
mov ecx, dword [ebp + 0xc]
call fcn.005ecf4f
cmp dword [0x6a3388], 0
je 0x418c9e
mov eax, dword [ebp - 0x18]
push dword [eax + 0x1dc]
push str.COEAViewerApp::GetLocalClientIDEx_m_bClientIDAllInit__d__3
push edi
push 1
push esi
call fcn.004cdcb0
add esp, 0x14
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x1dc], 0
jne 0x418d67
push 0xffffffffffffffff
lea ecx, [eax + 0x15c]
push 0
call fcn.00487850
lea eax, [ebx + 0x208]
test eax, eax
je 0x418d2e
and dword [ebp - 0x1c], 0
cmp dword [ebx + 0x204], 0
jbe 0x418d2e
mov dword [ebp - 0x20], eax
push 0x100
lea ecx, [ebp - 0x24]
push dword [ebp - 0x20]
call fcn.004803e0
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 1
cmp dword [eax - 8], 0
je 0x418d0d
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x24]
push edx
lea ecx, [eax + 0x15c]
mov eax, dword [eax + 0x160]
push eax
call fcn.00487ee0
and byte [ebp - 4], 0
lea ecx, [ebp - 0x24]
call fcn.00480a70
inc dword [ebp - 0x1c]
add dword [ebp - 0x20], 0x100
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebx + 0x204]
jb 0x418cd7
cmp dword [0x6a3388], 0
je 0x418d51
mov eax, dword [ebp - 0x18]
push dword [eax + 0x160]
push str.COEAViewerApp::GetLocalClientIDEx_getsize__d__4
push edi
push 1
push esi
call fcn.004cdcb0
add esp, 0x14
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x160], 0
jle 0x418d67
mov dword [eax + 0x1dc], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.0047b2e0
push ebx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 0x6a9040
jmp 0x418eb5
push dword [0x66b7c4]
push eax
push 4
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
test eax, eax
mov dword [ebp - 0x1c], eax
je 0x418eb5
cmp dword [0x6a3388], 0
je 0x418dc4
push dword [ebp + 8]
push str.COEAViewerApp::GetLocalClientIDEx_dwVerNo__d__5
push edi
push 1
push esi
call fcn.004cdcb0
add esp, 0x14
xor eax, eax
push eax
push eax
push eax
push 4
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
test eax, eax
mov dword [ebp - 0x14], eax
je 0x418eac
cmp dword [0x6a3388], 0
je 0x418e05
mov eax, dword [ebp - 0x18]
push dword [eax + 0x1dc]
push dword [ebp + 8]
push str.COEAViewerApp::GetLocalClientIDEx_dwVerNo__d___m_bClientIDAllInit__d__6
push edi
push 1
push esi
call fcn.004cdcb0
add esp, 0x18
push dword [ebp - 0x14]
lea ecx, [ebp - 0x10]
call fcn.0047a930
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 2
cmp dword [eax - 8], 0
jne 0x418e31
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x10]
add eax, 0x100
push eax
call fcn.0047b5a0
push 0x40
mov esi, section.OEAXView
pop edi
push edi
push 0
push esi
call fcn.00466010
push edi
push dword [ebp - 0x10]
push esi
call fcn.00466960
add esp, 0x18
cmp dword [ebp + 8], 0
jne 0x418e60
push dword [ebp - 0x10]
mov ecx, dword [ebp + 0xc]
call fcn.005ecf4f
mov esi, dword [ebp - 0x14]
lea ecx, [ebp - 0x10]
lea eax, [esi + 0x100]
push eax
call fcn.0047b5a0
push edi
push 0
push ebx
call fcn.00466010
push edi
push dword [ebp - 0x10]
push ebx
call fcn.00466960
add esp, 0x18
cmp dword [ebp + 8], 1
jne 0x418e99
push dword [ebp - 0x10]
mov ecx, dword [ebp + 0xc]
call fcn.005ecf4f
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.0047b2e0
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
cmp dword [eax - 8], 0
jne 0x418f61
and byte [ebp - 0x224], 0
push 0x7f
pop ecx
xor eax, eax
lea edi, [ebp - 0x223]
and dword [ebp - 0x14], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x14]
mov esi, 0x200
push eax
lea eax, [ebp - 0x224]
push esi
push eax
push 4
call fcn.00438687
add esp, 0x10
cmp eax, 0xffffffff
je 0x418f61
lea eax, [ebp - 0x224]
push esi
push eax
push 0
call fcn.00493470
add esp, 0xc
cmp dword [ebp - 0x14], eax
jne 0x418f61
push 0x40
mov esi, section.OEAXView
pop edi
push edi
push 0
push esi
call fcn.00466010
lea eax, [ebp - 0x224]
push edi
push eax
push esi
call fcn.00466960
push edi
push 0
push ebx
call fcn.00466010
lea eax, [ebp - 0x124]
push edi
push eax
push ebx
call fcn.00466960
add esp, 0x30
cmp dword [ebp + 8], 0
jne 0x418f58
push esi
jmp 0x418f59
push ebx
mov ecx, dword [ebp + 0xc]
call fcn.005ecf4f
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov eax, dword [eax]
cmp dword [eax - 8], ecx
setne cl
mov eax, ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8