Function at 0x425fdd
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b9173
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xec
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xd8], 0xeb
cmp dword [ebp - 0xd8], 0x1b30
jle 0x426059
jne 0x42606f
invalid
cmp dword [ebp + 8], 0
jne 0x426067
mov eax, dword [ebp + 8]
jmp 0x426ac5
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
cmp dword [ebp + 0xc], 0
or al, 0
jne 0x4268ec
mov dword [ebp - 0x70], 0x8e2
mov dword [ebp - 0x88], str.djywmmw_pwyems_yqc
cmp dword [ebp - 0x70], 0xcab
jle 0x426130
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
and dword [ebp - 0x5c], 0
jmp 0x4260aa
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x210a
jge 0x426130
and dword [ebp - 0x54], 0
jmp 0x4260c0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x2ade
jge 0x42612b
and dword [ebp - 0x24], 0
jmp 0x4260d6
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x41db
jge 0x426129
mov eax, dword [ebp - 0x54]
xor eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x5c]
cdq
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], edx
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
lea ecx, [ebp - 0xfc]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0xfc]
call fcn.00402cea
jmp 0x4260cf
jmp 0x4260b9
jmp 0x4260a3
mov eax, dword [ebp + 0x10]
shr eax, 2
mov dword [ebp - 0x68], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x70], 0x7ef
jge 0x426152
push dword [ebp - 0x88]
call fcn.0048cb18
pop ecx
jmp 0x42616e
or dword [ebp - 4], 0xffffffff
jmp 0x426178
mov dword [ebp - 0xb4], 0x785
cmp dword [ebp - 0xb4], 0x1a31
jle 0x4261e3
fldlg2
leave
int 0x96
jbe 0x426208
lodsb al, byte [esi]
cld
fcom st(3)
lds esp, [ebp + ecx - 0x15]
imul esi, dword [ebx + 0x48], 0x7bdad209
or byte [edx + 0x3a], ah
or dword [ecx + 0x70], 0x25
sbb eax, 0xedeab03c
and edi, dword [ebx]
mov byte [0x597142e3], al
xchg edx, eax
mov dword [edx - 0x7233e8f7], ebp
add byte [esi], 0x89
aaa
dec eax
adc al, byte [edi - 0x28359bf0]
daa
jnp 0x426217
das
xor byte [esi], ah
jmp fcn.0040143d
and dword [ebp - 0x60], 0
jmp 0x4261f0
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x68]
jae 0x426209
mov eax, dword [ebp - 0x14]
and dword [eax], 0
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [ebp - 0x14], eax
jmp 0x4261e9
loopne 0x4261d1
mov dword [ebp - 0x78], 0x30a7
mov dword [ebp - 0xa0], str.cizck_aaff_sgyjmssv_axqjpro_joebwm_wyir_teufrerwh_bgsaze_avryu_nok_peuff
cmp dword [ebp - 0x78], 0x32d9
jle 0x426430
inc ebp
mov byte [edi - 0x38ffffd0], ah
test dword [eax - 1], esp
invalid
and eax, 0x7d8100ab
mov cl, bl
xor al, byte [eax]
add byte [edi], cl
mov cs, word [ecx]
add al, byte [eax]
add byte [ebx - 0x14ff2b9b], al
pop es
and dword [ebp - 0x2c], 0
jmp 0x426234
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x218
jge 0x426430
mov dword [ebp - 0x90], 0xb85
cmp dword [ebp - 0x90], 0x25a7
jle 0x4262b1
rcl esi, cl
sub al, 0x19
pop ss
dec ebp
mov cl, 0x33
jo 0x55a73b17
aas
and ebp, 0xfffffffd
sbb edi, ecx
adc eax, 0x94e68aae
ja 0x42626b
adc bh, ah
add byte [ebp + 0x57], bl
and ah, byte [ebx + 0x3eb9e82a]
fcomp dword [esi + 0x48]
pop eax
push edx
stosd dword es:[edi], eax
shl esp, 0xc6
out 0x9c, eax
fsqrt
dec ecx
sub byte [esi + 0x1e], cl
mov al, 0x78
push ebx
and dword [ebp - 0x4c], 0
jmp 0x4262be
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x5e82
jge 0x42642b
and dword [ebp - 0x34], 0
jmp 0x4262d8
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x5005
jge 0x426426
and dword [ebp - 0x58], 0
jmp 0x4262f2
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x7ee7
jge 0x426421
mov dword [ebp - 0xe4], 0xecc
cmp dword [ebp - 0xe4], 0x16e8
jle 0x426365
invalid
mov eax, dword [ebp - 0x2c]
cdq
idiv dword [ebp - 0x4c]
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x58]
or eax, edx
cdq
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0x98], 0x5e4
cmp dword [ebp - 0x98], 0x13d9
jle 0x426406
push dword [ebp - 0xb8]
push dword [ebp - 0xbc]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x4262eb
jmp 0x4262d1
jmp 0x4262b7
jmp 0x42622d
mov eax, dword [ebp + 0x10]
xor edx, edx
push 4
pop ecx
div ecx
mov dword [ebp - 0x68], edx
mov dword [ebp - 4], 2
cmp dword [ebp - 0x78], 0x2fbd
jge 0x4264ea
mov dword [ebp - 0xc0], 0x2b
cmp dword [ebp - 0xc0], 0x2277
jle 0x4264da
cdq
and esp, edi
add dword [eax - 0x7e], esi
pop ecx
mov cl, byte [esi - 0x53]
sbb eax, 0x82b53aba
adc eax, 0x44307021
jle 0x4264e0
mov dl, bl
mov edx, dword [ebp - 0xa0]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x426573
or dword [ebp - 4], 0xffffffff
jmp 0x42657d
mov dword [ebp - 0x74], 0xa5c
mov dword [ebp - 0x8c], str.vndqnktji_nxmvvjqv_lhgysz_rryvbeqw_fuyubz_ykers_onokjjzn_tkqca_xhoynuq_mxjubfny_sbqxmxjvv_ntvvxc
cmp dword [ebp - 0x74], 0xbbb
jle 0x426610
and dword [ebp - 0x3c], 0
jmp 0x4265a4
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x4a28
jge 0x426610
and dword [ebp - 0x1c], 0
jmp 0x4265ba
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x73fa
jge 0x42660e
and dword [ebp - 0x44], 0
jmp 0x4265d0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x5457
jge 0x42660c
mov eax, dword [ebp - 0x3c]
cdq
idiv dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x44]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], edx
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x4265c9
jmp 0x4265b3
jmp 0x42659d
and dword [ebp - 0x64], 0
jmp 0x42661d
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x68]
jae 0x4267b1
mov dword [ebp - 0x6c], 0x3747
mov dword [ebp - 0xcc], str.gcgmqab_rnlx_ctlq_kuxk_giwcynh_vjppnralm_kstt_kreb
cmp dword [ebp - 0x6c], 0x3af5
jle 0x4266f3
push 0x1a66
push 0x1542
push 0
push 0xd93
push 0
call dword [sym.imp.USER32.dll_GetMenuStringW]
and dword [ebp - 0x20], 0
jmp 0x42666d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xb5f
jge 0x4266f3
and dword [ebp - 0x28], 0
jmp 0x426683
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x2802
jge 0x4266ee
and dword [ebp - 0x30], 0
jmp 0x426699
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x381b
jge 0x4266ec
and dword [ebp - 0x38], 0
jmp 0x4266af
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x5b37
jge 0x4266ea
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x38]
cdq
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], edx
push dword [ebp - 0xd0]
push dword [ebp - 0xd4]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x4266a8
jmp 0x426692
jmp 0x42667c
jmp 0x426666
mov eax, dword [ebp - 0x14]
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xa8], 0xbf0
cmp dword [ebp - 0xa8], 0x1fe4
jle 0x426766
and ebx, edi
jmp 0x97d79c0c
mov dword [ebp - 4], 4
cmp dword [ebp - 0x6c], 0x34c8
jge 0x426786
mov edx, dword [ebp - 0xcc]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x4267a2
or dword [ebp - 4], 0xffffffff
jmp 0x4267ac
jmp 0x426616
mov dword [ebp - 4], 6
cmp dword [ebp - 0x74], 0x7d1
jge 0x4268c1
mov dword [ebp - 0x84], 0xdae
cmp dword [ebp - 0x84], 0x18b0
jle 0x4268b1
insb byte es:[edi], dx
test dword [ecx], edx
push esp
cmp eax, 0x5d48dafa
int 0xae
rcr dword [esi - 0x2d8897b0], cl
add byte [eax], al
mov edx, dword [ebp - 0x8c]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x4268dd
or dword [ebp - 4], 0xffffffff
jmp 0x4268e7
jmp 0x426ac2
mov dword [ebp - 0x7c], 0x209e
mov dword [ebp - 0x9c], str.vfa_emc_uoxycsllu_nvijk_hycgpurxa_ywqbsd_piq_svmgituj
mov dword [ebp - 0x94], 0x637
cmp dword [ebp - 0x94], 0x234c
jle 0x4269cb
mov byte fs:[edi - 0x70040aeb], dh
mov ebx, ebx
enter 0x7f1a, 0x6c
shr dword [esi + 0x776547c6], 1
mov word [0xe215d71e], ax
int 0x6d
sbb al, 0x6e
xor dl, cl
mov eax, dword [0x9f9567bd]
pop ebx
lcall 0xeb44, 0x185176f7
lea esp, [ebx - 0x31]
jno 0x426958
invalid
sbb al, 5
lcall 0x50d6, 0x4f447969
cmp dword [ebp - 0x7c], 0x2440
jle 0x426a4c
and dword [ebp - 0x40], 0
jmp 0x4269e1
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x14db
jge 0x426a4c
and dword [ebp - 0x48], 0
jmp 0x4269f7
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x85c
jge 0x426a4a
and dword [ebp - 0x50], 0
jmp 0x426a0d
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x563a
jge 0x426a48
mov eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0x48]
imul edx, dword [ebp - 0x50]
mov eax, edx
cdq
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], edx
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x426a06
jmp 0x4269f0
jmp 0x4269da
mov al, byte [ebp + 0xc]
mov byte [ebp - 0x15], al
mov dword [ebp - 4], 8
cmp dword [ebp - 0x7c], 0x1f00
jge 0x426a72
mov edx, dword [ebp - 0x9c]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x426a8e
or dword [ebp - 4], 0xffffffff
jmp 0x426a98
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp + 0x10]
dec eax
mov dword [ebp + 0x10], eax
cmp dword [ebp - 0xa4], 0
je 0x426ac2
mov eax, dword [ebp - 0x14]
mov cl, byte [ebp - 0x15]
mov byte [eax], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
jmp 0x426a98
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret