Function at 0x423330
Capabilities:
Check if file exists
Get file attributes
Link many functions at runtime

Disassembly:
sub esp, 0x104
xor eax, eax
push ebx
mov ebx, ecx
cmp dword [ebx + 0x34], eax
je 0x4233a7
cmp dword [ebx + 0xc], eax
je 0x42359e
cmp dword [ebx + 0x10], eax
je 0x42359e
cmp dword [ebx + 0x14], eax
je 0x42359e
cmp dword [ebx + 0x18], eax
je 0x42359e
cmp dword [ebx + 0x1c], eax
je 0x42359e
cmp dword [ebx + 0x20], eax
je 0x42359e
cmp dword [ebx + 0x24], eax
je 0x42359e
cmp dword [ebx + 0x28], eax
je 0x42359e
cmp dword [ebx + 0x2c], eax
je 0x42359e
cmp dword [ebx + 0x30], eax
je 0x42359e
mov eax, 1
pop ebx
add esp, 0x104
ret
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x24], eax
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x30], eax
lea eax, [esp + 4]
push 0x104
push eax
mov ecx, ebx
mov dword [ebx + 0x34], 1
call fcn.004232f0
test eax, eax
je 0x42359c
push ebp
push esi
push edi
lea edi, [esp + 0x10]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea ebp, [ebx + 0x38]
mov edx, ecx
mov esi, edi
mov edi, ebp
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.libspyerp.dat
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebp
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x423473
push 0x5c
push ebp
call dword [sym.imp.MSVCRT.dll__mbsrchr]
mov edx, eax
mov edi, str.libspyer.dat
or ecx, 0xffffffff
xor eax, eax
add esp, 8
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str._antispy.dll
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x10]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
lea eax, [esp + 0x10]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
test eax, eax
mov dword [ebx + 4], eax
je 0x423546
mov esi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
push str.ASEngCreate
push eax
call esi
mov ecx, dword [ebx + 4]
push str.ASEngInit
push ecx
mov dword [ebx + 0xc], eax
call esi
mov edx, dword [ebx + 4]
push str.ASEngInitEx
push edx
mov dword [ebx + 0x10], eax
call esi
mov dword [ebx + 0x14], eax
mov eax, dword [ebx + 4]
push str.ASEngScan
push eax
call esi
mov ecx, dword [ebx + 4]
push str.ASEngStop
push ecx
mov dword [ebx + 0x18], eax
call esi
mov edx, dword [ebx + 4]
push str.ASEngScanAddType
push edx
mov dword [ebx + 0x1c], eax
call esi
mov dword [ebx + 0x20], eax
mov eax, dword [ebx + 4]
push str.AsEngRemove
push eax
call esi
mov ecx, dword [ebx + 4]
push str.ASEngSetPause
push ecx
mov dword [ebx + 0x24], eax
call esi
mov edx, dword [ebx + 4]
push str.AsEngDestroy
push edx
mov dword [ebx + 0x28], eax
call esi
mov dword [ebx + 0x2c], eax
mov eax, dword [ebx + 4]
push str.AsEngSimpleScanFile
push eax
call esi
mov dword [ebx + 0x30], eax
mov eax, dword [ebx + 0xc]
pop edi
pop esi
pop ebp
test eax, eax
je 0x42359c
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x42359c
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x42359c
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x42359c
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x42359c
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x42359c
mov eax, dword [ebx + 0x24]
test eax, eax
je 0x42359c
mov eax, dword [ebx + 0x28]
test eax, eax
je 0x42359c
mov eax, dword [ebx + 0x2c]
test eax, eax
je 0x42359c
mov eax, dword [ebx + 0x30]
test eax, eax
je 0x42359c
mov eax, 1
pop ebx
add esp, 0x104
ret
xor eax, eax
pop ebx
add esp, 0x104
ret