Function at 0x418fc0
Capabilities:
Check if file exists
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55e77e
mov eax, dword fs:[0]
push eax
sub esp, 0x498
mov eax, dword [0x5be26c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push dword [ebp + 8]
mov dword [ebp - 4], 0
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
or ebx, 0xffffffff
test eax, eax
je 0x4190f9
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
mov dword [ebp - 0x244], edi
test edi, edi
jne 0x419138
call fcn.0047a580
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4190f9
push 0x60
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxinst_helper.cc
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], 0xf
mov byte [ebp - 0x1ec], al
call fcn.004211a0
push 3
push 0x572c38
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 1
mov dword [ebp - 0x1c4], edi
mov dword [ebp - 0x1c0], 0xf
mov byte [ebp - 0x1d4], 0
call fcn.004211a0
mov byte [ebp - 4], 2
call fcn.0047a580
mov edi, eax
lea ecx, [ebp - 0x40c]
push 0x14d
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040b1c0
mov esi, eax
push str.cefhelper.dll_module_is_nullptr
push esi
mov byte [ebp - 4], 3
call fcn.0040c570
mov eax, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x40c]
call fcn.0040cbc0
lea ecx, [ebp - 0x1d4]
call fcn.0040bb80
lea ecx, [ebp - 0x1ec]
call fcn.0040bb80
xor edi, edi
mov edx, dword [ebp + 8]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x41911a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046c16d
mov esp, ebp
pop ebp
ret
push str.StartEx
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push ecx
mov esi, esp
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x234], esi
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
push eax
call fcn.004112d0
add eax, 0x10
add esp, 4
mov dword [esi], eax
lea eax, [ebp - 0x224]
push eax
call fcn.004609a0
add esp, 8
cmp dword [ebp - 0x228], 0
mov byte [ebp - 4], 4
jne 0x4194bf
call fcn.0047a580
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x41948b
mov eax, 0x1b23
mov esi, 0x1b28
mov word [ebp - 0x144], ax
mov edx, 0x1b25
mov word [ebp - 0x142], si
mov eax, 0x1b27
mov word [ebp - 0x140], ax
mov ecx, 0x1b31
mov eax, 0x1b22
mov edi, 0x1b2e
mov word [ebp - 0x13e], ax
mov ebx, 0xf
mov eax, 0x1b20
mov word [ebp - 0x13c], ax
mov eax, 0x1b26
mov word [ebp - 0x13a], dx
mov word [ebp - 0x138], cx
mov word [ebp - 0x136], di
mov word [ebp - 0x134], ax
mov eax, 0x1b7d
mov word [ebp - 0x132], ax
mov eax, 0x1b3d
mov word [ebp - 0x130], ax
mov eax, 0x1b35
mov word [ebp - 0x12e], ax
mov eax, 0x1b3a
mov word [ebp - 0x12c], ax
mov eax, 0x1b7f
mov word [ebp - 0x12a], ax
mov eax, 0x1b0e
mov word [ebp - 0x128], ax
mov eax, 0x1b2f
mov word [ebp - 0x126], si
mov esi, 0x1b09
mov word [ebp - 0x124], cx
mov ecx, 0x1b00
mov word [ebp - 0x122], ax
mov eax, 0x1b1f
mov word [ebp - 0x120], dx
mov edx, 0x1b05
mov word [ebp - 0x11e], ax
mov eax, 0x1b2d
mov word [ebp - 0x11c], ax
mov eax, 0x1b79
mov word [ebp - 0x11a], ax
mov eax, 0x1b37
mov word [ebp - 0x118], ax
mov eax, 0x1b0a
mov word [ebp - 0x116], di
xor edi, edi
mov word [ebp - 0x114], ax
mov eax, 0x1b1d
mov word [ebp - 0x112], cx
mov word [ebp - 0x110], ax
mov eax, 0x1b01
mov word [ebp - 0x10e], cx
mov ecx, 0x1b4d
mov word [ebp - 0x10c], si
mov word [ebp - 0x10a], ax
mov eax, 0x1b13
mov word [ebp - 0x108], cx
mov word [ebp - 0x106], dx
mov word [ebp - 0x104], ax
mov eax, 0x1b0f
mov word [ebp - 0x102], cx
mov ecx, 0x1b1f
mov word [ebp - 0x100], ax
mov eax, 0x1b11
mov word [ebp - 0xfe], cx
mov word [ebp - 0xfc], si
mov word [ebp - 0xfa], dx
mov word [ebp - 0xf8], ax
mov eax, 0x1b06
mov word [ebp - 0xf6], cx
mov word [ebp - 0xf4], ax
mov eax, 0x1b73
mov word [ebp - 0xf2], ax
mov ax, word [ebp - 0x144]
nop dword [eax]
mov ax, word [ebp + edi*2 - 0x144]
mov ecx, edi
and ecx, ebx
movzx esi, ax
cmp ecx, ebx
mov eax, 0x4f491b48
mov edx, 0xbba2ab24
cmovae ecx, ebx
shl ecx, 2
call fcn.0046c590
mov cx, ax
lea eax, [edi + 0x1b48]
and cx, bx
xor cx, ax
xor cx, si
mov word [ebp + edi*2 - 0x144], cx
inc edi
cmp edi, 0x2a
jb 0x419380
push 0x60
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxinst_helper.cc
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], ebx
mov byte [ebp - 0x21c], 0
call fcn.004211a0
push 3
push 0x572c38
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 5
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 0xf
mov byte [ebp - 0x204], 0
call fcn.004211a0
mov byte [ebp - 4], 6
call fcn.0047a580
mov edi, eax
lea ecx, [ebp - 0x4a4]
push 0x155
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.0040b1c0
mov esi, eax
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 7
push eax
push esi
call fcn.00409810
mov eax, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x4a4]
call fcn.0040cbc0
lea ecx, [ebp - 0x204]
call fcn.0040bb80
lea ecx, [ebp - 0x21c]
call fcn.0040bb80
or ebx, 0xffffffff
mov edx, dword [ebp - 0x224]
mov eax, ebx
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4194ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor edi, edi
push dword [ebp - 0x244]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4190fb
push str.SetProductInfo
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
mov eax, dword [ebp - 0x224]
add eax, 0xfffffff0
mov dword [ebp - 0x240], edi
push eax
call fcn.004112d0
add esp, 4
lea esi, [eax + 0x10]
mov dword [ebp - 0x23c], esi
cmp dword [esi - 4], 1
mov byte [ebp - 4], 8
jle 0x41950c
push dword [esi - 0xc]
lea ecx, [ebp - 0x23c]
call fcn.00417250
mov esi, dword [ebp - 0x23c]
push esi
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push dword [esi - 8]
push esi
call fcn.0051aa23
add esp, 8
test eax, eax
js 0x419bd5
cmp eax, dword [esi - 8]
jg 0x419bd5
mov dword [esi - 0xc], eax
xor ecx, ecx
mov word [esi + eax*2], cx
lea eax, [ebp - 0x224]
push str.7z.dll
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.0040c920
add esp, 0xc
mov byte [ebp - 4], 9
test edi, edi
je 0x419b61
lea eax, [ebp - 0x238]
push eax
call fcn.004278c0
mov ecx, eax
call fcn.00427890
mov ecx, dword [eax]
mov byte [ebp - 4], 0xa
call fcn.00438fe0
mov edi, dword [ebp - 0x234]
mov cl, al
mov byte [ebp - 0x21d], cl
mov byte [ebp - 4], 9
test edi, edi
je 0x4195b9
mov eax, ebx
lock xadd dword [edi + 4], eax
jne 0x4195b9
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, ebx
lock xadd dword [edi + 8], eax
jne 0x4195b3
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov cl, byte [ebp - 0x21d]
test cl, cl
je 0x41987f
call fcn.0047a580
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x419854
push 0x60
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxinst_helper.cc
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], 0xf
mov byte [ebp - 0x174], al
call fcn.004211a0
push 3
push 0x572c38
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0xf
mov byte [ebp - 0x15c], 0
call fcn.004211a0
mov byte [ebp - 4], 0xc
call fcn.0047a580
push 1
push 2
lea ecx, [ebp - 0x2dc]
mov dword [ebp - 0x234], eax
call fcn.0040ade0
push 0xffffffffffffffff
push 0x572938
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0xd
call fcn.00422460
push 0xffffffffffffffff
push 0x57293c
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x230], eax
call fcn.00422460
push 0x64
mov edi, eax
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.00516260
add esp, 0xc
cmp edi, 0xffffffff
je 0x419741
mov ecx, dword [ebp - 0x230]
lea eax, [edi - 1]
cmp ecx, eax
jae 0x419741
mov eax, dword [ebp - 0x164]
lea edx, [ecx + 1]
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0xf
mov byte [ebp - 0x1a4], 0
cmp eax, edx
jb 0x419bdf
sub edi, ecx
sub eax, edx
lea ecx, [edi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0x160], 0x10
lea eax, [ebp - 0x174]
cmovae eax, dword [ebp - 0x174]
push ecx
add eax, edx
lea ecx, [ebp - 0x1a4]
push eax
call fcn.004211a0
cmp dword [ebp - 0x190], 0x10
lea eax, [ebp - 0x1a4]
cmovae eax, dword [ebp - 0x1a4]
push eax
push 0x162
lea eax, [ebp - 0x74]
push str.__4d___s_
push eax
call fcn.0040a880
add esp, 0x10
lea ecx, [ebp - 0x1a4]
call fcn.0040bb80
jmp 0x419757
push 0x162
lea eax, [ebp - 0x74]
push str.__4d_
push eax
call fcn.0040a880
add esp, 0xc
cmp dword [ebp - 0x148], 0x10
lea eax, [ebp - 0x15c]
cmovae eax, dword [ebp - 0x15c]
push eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.0040c570
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x2dc]
push eax
call fcn.0040c570
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0xe
push str.Unzip_new_kernel
push eax
call fcn.0040c570
mov ecx, dword [ebp - 0x234]
lea edx, [ebp - 0x2dc]
add esp, 0x18
mov eax, dword [ecx]
push edx
call dword [eax + 0x1c]
lea ecx, [ebp - 0x2dc]
call fcn.0040cbc0
mov edx, dword [ebp - 0x148]
mov byte [ebp - 4], 0xb
cmp edx, 0x10
jb 0x4197fb
mov ecx, dword [ebp - 0x15c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4197f1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419be4
push edx
push ecx
call fcn.0046c2cf
add esp, 8
mov edx, dword [ebp - 0x160]
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0xf
mov byte [ebp - 0x15c], 0
mov byte [ebp - 4], 9
cmp edx, 0x10
jb 0x419854
mov ecx, dword [ebp - 0x174]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41984a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419be9
push edx
push ecx
call fcn.0046c2cf
add esp, 8
push dword [ebp - 0x22c]
push esi
push 0x571ecc
call dword [ebp - 0x240]
push dword [0x5be0b0]
push dword [ebp - 0x224]
call dword [ebp - 0x228]
mov edi, eax
jmp 0x419b63
call fcn.0047a580
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x419b39
push 0x60
push str.d:jenkins.jenkinsworkspaceweiduangamemicrogamemicrogamebox_srcmicrogameboxinst_helper.cc
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], al
call fcn.004211a0
push 3
push 0x572c38
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0xf
mov byte [ebp - 0x18c], 0
call fcn.004211a0
mov byte [ebp - 4], 0x10
call fcn.0047a580
push 1
push 2
lea ecx, [ebp - 0x374]
mov dword [ebp - 0x230], eax
call fcn.0040ade0
push 0xffffffffffffffff
push 0x572938
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x11
call fcn.00422460
push 0xffffffffffffffff
push 0x57293c
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x234], eax
call fcn.00422460
push 0x64
mov edi, eax
lea eax, [ebp - 0xd8]
push 0
push eax
call fcn.00516260
add esp, 0xc
cmp edi, 0xffffffff
je 0x419a05
mov ecx, dword [ebp - 0x234]
lea eax, [edi - 1]
cmp ecx, eax
jae 0x419a05
mov eax, dword [ebp - 0xe0]
lea edx, [ecx + 1]
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
cmp eax, edx
jb 0x419bee
sub edi, ecx
sub eax, edx
lea ecx, [edi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0xdc], 0x10
lea eax, [ebp - 0xf0]
cmovae eax, dword [ebp - 0xf0]
push ecx
add eax, edx
lea ecx, [ebp - 0x1bc]
push eax
call fcn.004211a0
cmp dword [ebp - 0x1a8], 0x10
lea eax, [ebp - 0x1bc]
cmovae eax, dword [ebp - 0x1bc]
push eax
push 0x166
lea eax, [ebp - 0xd8]
push str.__4d___s_
push eax
call fcn.0040a880
add esp, 0x10
lea ecx, [ebp - 0x1bc]
call fcn.0040bb80
jmp 0x419a1e
push 0x166
lea eax, [ebp - 0xd8]
push str.__4d_
push eax
call fcn.0040a880
add esp, 0xc
cmp dword [ebp - 0x178], 0x10
lea eax, [ebp - 0x18c]
cmovae eax, dword [ebp - 0x18c]
push eax
lea eax, [ebp - 0x374]
push eax
call fcn.0040c570
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x374]
push eax
call fcn.0040c570
lea eax, [ebp - 0x374]
mov byte [ebp - 4], 0x12
push str.Unzip_old_kernel
push eax
call fcn.0040c570
mov ecx, dword [ebp - 0x230]
lea edx, [ebp - 0x374]
add esp, 0x18
mov eax, dword [ecx]
push edx
call dword [eax + 0x1c]
lea ecx, [ebp - 0x374]
call fcn.0040cbc0
mov edx, dword [ebp - 0x178]
mov byte [ebp - 4], 0xf
cmp edx, 0x10
jb 0x419ac5
mov ecx, dword [ebp - 0x18c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x419abb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419bf3
push edx
push ecx
call fcn.0046c2cf
add esp, 8
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0xf
mov byte [ebp - 0x18c], 0
mov byte [ebp - 4], 9
cmp edx, 0x10
jb 0x419b1e
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x419b14
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419bf8
push edx
push ecx
call fcn.0046c2cf
add esp, 8
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
push dword [ebp - 0x22c]
push esi
push str.wdgame
call dword [ebp - 0x240]
push dword [0x5be05c]
push dword [ebp - 0x224]
call dword [ebp - 0x228]
mov edi, eax
jmp 0x419b63
xor edi, edi
mov edx, dword [ebp - 0x22c]
mov eax, ebx
mov byte [ebp - 4], 8
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x419b84
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x419b9f
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x224]
mov eax, ebx
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4194ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x244]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4190fb
push 0x80070057
call fcn.00410dc0
call fcn.00420c50
call fcn.0051a7fc
call fcn.0051a7fc
call fcn.00420c50
call fcn.0051a7fc
call fcn.0051a7fc
int3