Function at 0x4016d0
Capabilities:
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
mov esi, edx
push ebx
sub esp, 0x5fc
mov dword [ebp - 0x5cc], eax
xor eax, eax
movzx ebx, byte [0x404004]
mov word [ebp - 0x59e], ax
lea eax, [ebp - 0x268]
mov dword [ebp - 0x5bc], ecx
mov dword [ebp - 0x5ae], 0x200020
mov dword [ebp - 0x5aa], 0x200020
mov dword [ebp - 0x5a6], 0x200020
mov dword [ebp - 0x5a2], 0x200020
mov dword [ebp - 0x5c0], eax
and ebx, 8
jne 0x401ff0
mov eax, dword [ebp - 0x5bc]
lea edi, [ebp - 0x470]
test eax, eax
je 0x40184e
mov ecx, dword [ebp - 0x5cc]
xor eax, eax
lea esi, [esi]
nop
movzx edx, word [ecx + eax]
mov word [edi + eax], dx
add eax, 2
test dx, dx
jne 0x401758
cmp word [ebp - 0x470], 0
mov edx, edi
je 0x401781
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x401778
xor eax, eax
mov ecx, 0x2a
jmp 0x401797
movzx ecx, word [eax + 0x4052c4]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401790
test bl, bl
jne 0x4020e0
mov eax, dword [ebp - 0x5c0]
mov dword [esp], edi
lea ebx, [ebp - 0x23c]
mov dword [esp + 4], eax
call sub.kernel32.dll_FindFirstFileW
mov dword [ebp - 0x5bc], eax
sub esp, 8
cmp eax, 0xffffffff
je 0x401833
mov dword [ebp - 0x5b4], 0x2e
xor eax, eax
mov dword [ebp - 0x59c], 0x2e002e
mov word [ebp - 0x598], ax
test byte [ebp - 0x268], 0x10
je 0x401814
lea eax, [ebp - 0x5b4]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.kernel32.dll_lstrcmpW
sub esp, 8
test eax, eax
jne 0x401da8
mov eax, dword [ebp - 0x5c0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x5bc]
mov dword [esp], eax
call sub.kernel32.dll_FindNextFileW
sub esp, 8
test eax, eax
jne 0x4017d1
mov eax, dword [ebp - 0x5bc]
mov dword [esp], eax
call sub.kernel32.dll_FindClose
movzx ebx, byte [0x404004]
sub esp, 4
and ebx, 8
mov ecx, dword [ebp - 0x5cc]
xor eax, eax
lea esi, [esi]
lea esi, [esi]
movzx edx, word [ecx + eax]
mov word [edi + eax], dx
add eax, 2
test dx, dx
jne 0x401860
cmp word [ebp - 0x470], 0
mov edx, edi
je 0x401889
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x401880
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [esi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401890
test bl, bl
jne 0x401ea0
mov eax, dword [ebp - 0x5c0]
mov dword [esp], edi
mov dword [esp + 4], eax
call sub.kernel32.dll_FindFirstFileW
mov dword [ebp - 0x5d0], 0
mov dword [ebp - 0x5c8], eax
sub esp, 8
cmp eax, 0xffffffff
je 0x401a1b
lea esi, [ebp - 0x23c]
mov eax, esi
shr eax, 0x10
mov dword [ebp - 0x5d4], eax
lea esi, [esi]
nop
mov dword [ebp - 0x5b8], 0x2e
xor eax, eax
mov dword [ebp - 0x5b4], 0x2e002e
mov word [ebp - 0x5b0], ax
test byte [0x404004], 8
jne 0x401a40
lea eax, [ebp - 0x5b8]
mov dword [esp], esi
mov dword [esp + 4], eax
call sub.kernel32.dll_lstrcmpW
sub esp, 8
test eax, eax
je 0x4019f8
lea eax, [ebp - 0x5b4]
mov dword [esp], esi
mov dword [esp + 4], eax
call sub.kernel32.dll_lstrcmpW
sub esp, 8
test eax, eax
je 0x4019f8
mov eax, dword [ebp + 8]
mov ebx, dword [ebp - 0x268]
test eax, eax
jne 0x40196a
test bl, 0x10
jne 0x4019f8
mov eax, dword [ebp + 0xc]
or eax, dword [ebp + 0x10]
je 0x401c48
mov eax, dword [ebp + 0x10]
not eax
and ebx, eax
or ebx, dword [ebp + 0xc]
je 0x401d90
mov dword [ebp - 0x268], ebx
mov ecx, dword [ebp - 0x5cc]
xor eax, eax
lea esi, [esi]
movzx edx, word [ecx + eax]
mov word [edi + eax], dx
add eax, 2
test dx, dx
jne 0x401998
cmp word [ebp - 0x470], 0
mov edx, edi
je 0x4019c1
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x4019b8
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [esi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4019c8
mov dword [esp + 4], ebx
mov dword [esp], edi
call sub.kernel32.dll_SetFileAttributesW
mov dword [ebp - 0x5d0], 1
sub esp, 8
lea esi, [esi]
mov eax, dword [ebp - 0x5c0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x5c8]
mov dword [esp], eax
call sub.kernel32.dll_FindNextFileW
sub esp, 8
test eax, eax
jne 0x4018f0
mov eax, dword [ebp - 0x5c8]
mov dword [esp], eax
call sub.kernel32.dll_FindClose
mov eax, dword [ebp - 0x5d0]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x5d4]
test eax, eax
je 0x401d48
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call sub.kernel32.dll_IsBadStringPtrW
mov edx, str._invalid_
sub esp, 8
test eax, eax
jne 0x401b6e
movzx edx, word [ebp - 0x23c]
test dx, dx
je 0x401e78
mov ebx, dword [ebp - 0x5c0]
lea esi, [esi]
mov ecx, eax
lea eax, [eax + 1]
cmp word [ebx + ecx*2 + 0x2e], 0
jne 0x401a88
mov ebx, 0x224c
mov dword [ebp - 0x5bc], esi
lea eax, [ebp - 0x59a]
mov word [ebp - 0x59c], bx
lea ebx, [ebp - 0x47a]
mov dword [ebp - 0x5c4], ebx
jmp 0x401afa
cmp dx, 9
je 0x401bb8
cmp dx, 0xa
jne 0x401bd6
mov ebx, 0x6e5c
add eax, 2
mov word [eax - 2], bx
lea ebx, [ecx - 1]
cmp eax, dword [ebp - 0x5c4]
ja 0x401b40
test ecx, ecx
jle 0x401b40
mov ecx, dword [ebp - 0x5bc]
movzx edx, word [ecx]
mov ecx, ebx
add dword [ebp - 0x5bc], 2
cmp dx, 0xd
je 0x401ba0
jbe 0x401ac0
cmp dx, 0x22
je 0x401c30
cmp dx, 0x5c
jne 0x401bc9
mov ebx, 0x5c5c
add eax, 2
mov word [eax - 2], bx
lea ebx, [ecx - 1]
cmp eax, dword [ebp - 0x5c4]
jbe 0x401aeb
lea esi, [esi]
nop
mov byte [eax], 0x22
test ebx, ebx
jle 0x401e91
mov ecx, 0x2e2e
mov byte [eax + 3], 0x2e
lea edx, [eax + 4]
mov word [eax + 1], cx
lea eax, [ebp - 0x59c]
mov byte [edx], 0
mov dword [esp], eax
call fcn.00403a40
mov edx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Found__s_n
mov dword [esp + 8], str.ATTRIB_processdirectory
mov dword [esp + 4], 0x404004
mov dword [esp], 3
call section..text
jmp 0x40191a
mov edx, 0x725c
add eax, 2
mov word [eax - 2], dx
jmp 0x401ae0
mov ebx, 0x745c
add eax, 2
mov word [eax - 2], bx
jmp 0x401ae0
lea ebx, [edx - 0x20]
cmp bx, 0x5e
jbe 0x401d68
mov ebx, edx
mov byte [eax], 0x5c
add eax, 5
shr bx, 0xc
movzx ebx, bx
movzx ebx, byte [ebx + str.0123456789abcdef]
mov byte [eax - 4], bl
mov ebx, edx
shr bx, 8
and ebx, 0xf
movzx ebx, byte [ebx + str.0123456789abcdef]
mov byte [eax - 3], bl
mov ebx, edx
and edx, 0xf
shr bx, 4
movzx edx, byte [edx + str.0123456789abcdef]
and ebx, 0xf
movzx ebx, byte [ebx + str.0123456789abcdef]
mov byte [eax - 1], dl
mov byte [eax - 2], bl
jmp 0x401ae0
mov edx, 0x225c
add eax, 2
mov word [eax - 2], dx
jmp 0x401ae0
test bl, 2
je 0x401c59
mov ecx, 0x48
mov word [ebp - 0x5a6], cx
test bl, 4
je 0x401c6a
mov edx, 0x53
mov word [ebp - 0x5ac], dx
test bl, 0x20
je 0x401c7b
mov ecx, 0x41
mov word [ebp - 0x5ae], cx
test bl, 1
je 0x401c8c
mov edx, 0x52
mov word [ebp - 0x5a4], dx
test bh, 1
je 0x401c9d
mov ecx, 0x54
mov word [ebp - 0x5a2], cx
and bh, 8
jne 0x401d78
mov ebx, dword [ebp - 0x5cc]
xor edx, edx
nop
movzx ecx, word [ebx + edx]
mov word [edi + edx], cx
add edx, 2
test cx, cx
jne 0x401cb0
cmp word [ebp - 0x470], 0
mov edx, edi
je 0x401ce0
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x401cd0
lea esi, [esi]
movzx ecx, word [esi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401ce0
lea eax, [ebp - 0x5ae]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], str._1______2_n
call fcn.004013f0
mov dword [ebp - 0x5ae], 0x200020
mov dword [ebp - 0x5aa], 0x200020
mov dword [ebp - 0x5a6], 0x200020
mov dword [ebp - 0x5a2], 0x200020
mov dword [ebp - 0x5d0], 1
jmp 0x4019f8
movzx eax, si
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401160
mov edx, eax
jmp 0x401b6e
mov byte [eax], dl
add eax, 1
jmp 0x401ae0
mov edx, 0x43
mov word [ebp - 0x5a0], dx
jmp 0x401ca6
mov dword [ebp - 0x268], pe_nt_image_headers32
mov ebx, pe_nt_image_headers32
jmp 0x40198c
lea eax, [ebp - 0x59c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.kernel32.dll_lstrcmpW
sub esp, 8
test eax, eax
je 0x401814
mov ecx, dword [ebp - 0x5cc]
xor eax, eax
lea esi, [esi]
movzx edx, word [ecx + eax]
mov word [edi + eax], dx
add eax, 2
test dx, dx
jne 0x401dd0
cmp word [ebp - 0x470], 0
mov edx, edi
je 0x401df9
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x401df0
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401e00
cmp word [ebp - 0x470], 0
mov edx, edi
je 0x401e29
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x401e20
xor eax, eax
mov ecx, 0x5c
jmp 0x401e3f
movzx ecx, word [eax + 0x405280]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401e38
mov eax, dword [ebp + 0x10]
mov ecx, 1
mov edx, esi
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
mov eax, edi
call fcn.004016d0
jmp 0x401814
mov edx, 0x224c
mov byte [ebp - 0x59a], 0x22
lea eax, [ebp - 0x59a]
mov word [ebp - 0x59c], dx
lea edx, [eax + 1]
jmp 0x401b5b
mov eax, edi
shr eax, 0x10
je 0x402598
mov dword [esp + 4], 0xffffffff
mov dword [esp], edi
call sub.kernel32.dll_IsBadStringPtrW
mov edx, str._invalid_
sub esp, 8
test eax, eax
jne 0x401fbe
movzx edx, word [ebp - 0x470]
test dx, dx
je 0x4026e2
lea esi, [esi]
nop
mov ecx, eax
lea eax, [eax + 1]
cmp word [edi + ecx*2 + 2], 0
jne 0x401ee0
mov eax, 0x224c
lea esi, [ebp - 0x47a]
mov dword [ebp - 0x5bc], edi
mov word [ebp - 0x59c], ax
lea eax, [ebp - 0x59a]
mov dword [ebp - 0x5c4], esi
jmp 0x401f5a
cmp dx, 9
je 0x402368
cmp dx, 0xa
jne 0x402386
mov esi, 0x6e5c
add eax, 2
mov word [eax - 2], si
lea esi, [esi]
nop
lea esi, [ecx - 1]
cmp eax, dword [ebp - 0x5c4]
ja 0x401f90
test ecx, ecx
jle 0x401f90
mov ebx, dword [ebp - 0x5bc]
mov ecx, esi
movzx edx, word [ebx]
add dword [ebp - 0x5bc], 2
cmp dx, 0xd
je 0x402350
jbe 0x401f18
cmp dx, 0x22
je 0x4023e0
cmp dx, 0x5c
jne 0x402379
mov ebx, 0x5c5c
add eax, 2
mov word [eax - 2], bx
jmp 0x401f40
mov byte [eax], 0x22
test esi, esi
jle 0x4026fb
mov ecx, 0x2e2e
mov byte [eax + 3], 0x2e
lea edx, [eax + 4]
mov word [eax + 1], cx
lea eax, [ebp - 0x59c]
mov byte [edx], 0
mov dword [esp], eax
call fcn.00403a40
mov edx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Searching_for_files_as__s_n
mov dword [esp + 8], str.ATTRIB_processdirectory
mov dword [esp + 4], 0x404004
mov dword [esp], 3
call section..text
jmp 0x4018a8
mov eax, edx
shr eax, 0x10
je 0x4021c0
mov dword [esp + 4], 0xffffffff
mov dword [esp], edx
call sub.kernel32.dll_IsBadStringPtrW
mov dword [ebp - 0x5c8], str._invalid_
sub esp, 8
test eax, eax
jne 0x4021d9
movzx edx, word [esi]
test dx, dx
je 0x402769
lea esi, [esi]
mov ecx, eax
lea eax, [eax + 1]
cmp word [esi + ecx*2 + 2], 0
jne 0x402030
mov ebx, 0x224c
mov dword [ebp - 0x5c0], esi
lea eax, [ebp - 0x266]
mov word [ebp - 0x268], bx
jmp 0x4020a4
cmp dx, 9
je 0x402580
cmp dx, 0xa
jne 0x4024ce
mov edi, 0x6e5c
add eax, 2
mov word [eax - 2], di
lea edi, [ecx - 1]
test ecx, ecx
jle 0x4025b8
lea ebx, [ebp - 0x146]
cmp eax, ebx
ja 0x4025b8
mov ebx, dword [ebp - 0x5c0]
mov ecx, edi
movzx edx, word [ebx]
add dword [ebp - 0x5c0], 2
cmp dx, 0xd
je 0x402568
jbe 0x402060
cmp dx, 0x22
je 0x402520
cmp dx, 0x5c
jne 0x4024c1
mov ebx, 0x5c5c
add eax, 2
mov word [eax - 2], bx
jmp 0x402080
mov eax, edi
shr eax, 0x10
je 0x402703
mov dword [esp + 4], 0xffffffff
mov dword [esp], edi
call sub.kernel32.dll_IsBadStringPtrW
mov edx, str._invalid_
sub esp, 8
test eax, eax
jne 0x402425
movzx edx, word [ebp - 0x470]
test dx, dx
je 0x402727
lea esi, [esi]
nop
mov ecx, eax
lea eax, [eax + 1]
cmp word [edi + ecx*2 + 2], 0
jne 0x402120
mov eax, 0x224c
mov dword [ebp - 0x5bc], esi
mov esi, edi
mov word [ebp - 0x268], ax
lea eax, [ebp - 0x266]
jmp 0x40218e
cmp dx, 9
je 0x402688
cmp dx, 0xa
jne 0x402602
mov ebx, 0x6e5c
add eax, 2
mov word [eax - 2], bx
lea edx, [ebp - 0x146]
lea ebx, [ecx - 1]
cmp eax, edx
ja 0x4023f1
test ecx, ecx
jle 0x4023f1
movzx edx, word [esi]
mov ecx, ebx
add esi, 2
cmp dx, 0xd
je 0x402670
jbe 0x402150
cmp dx, 0x22
je 0x402658
cmp dx, 0x5c
jne 0x4025f5
mov ebx, 0x5c5c
add eax, 2
mov word [eax - 2], bx
jmp 0x402170
movzx eax, dx
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401160
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x5cc]
shr eax, 0x10
je 0x4026b0
mov ebx, dword [ebp - 0x5cc]
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call sub.kernel32.dll_IsBadStringPtrW
mov edx, str._invalid_
sub esp, 8
test eax, eax
jne 0x4022f6
movzx edx, word [ebx]
test dx, dx
je 0x402748
lea esi, [esi]
mov ecx, eax
lea eax, [eax + 1]
cmp word [ebx + ecx*2 + 2], 0
jne 0x402220
mov ebx, dword [ebp - 0x5cc]
mov edi, 0x224c
lea eax, [ebp - 0x266]
mov word [ebp - 0x268], di
mov dword [ebp - 0x5c4], ebx
jmp 0x40228c
cmp dx, 9
je 0x402550
cmp dx, 0xa
jne 0x40245f
mov edi, 0x6e5c
add eax, 2
mov word [eax - 2], di
lea edi, [ecx - 1]
test ecx, ecx
jle 0x4022c8
lea ebx, [ebp - 0x146]
cmp eax, ebx
ja 0x4022c8
mov ebx, dword [ebp - 0x5c4]
mov ecx, edi
movzx edx, word [ebx]
add dword [ebp - 0x5c4], 2
cmp dx, 0xd
je 0x402538
jbe 0x402250
cmp dx, 0x22
je 0x4024b0
cmp dx, 0x5c
jne 0x402452
mov ebx, 0x5c5c
add eax, 2
mov word [eax - 2], bx
jmp 0x402270
mov byte [eax], 0x22
test edi, edi
jle 0x402761
mov ecx, 0x2e2e
mov byte [eax + 3], 0x2e
lea edx, [eax + 4]
mov word [eax + 1], cx
mov eax, dword [ebp - 0x5c0]
mov byte [edx], 0
mov dword [esp], eax
call fcn.00403a40
mov edx, eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Processing_dir__s__spec__s___d__x__x_n
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], str.ATTRIB_processdirectory
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x5bc]
mov dword [esp + 4], 0x404004
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x5c8]
mov dword [esp], 3
mov dword [esp + 0x14], eax
call section..text
movzx ebx, byte [0x404004]
and ebx, 8
jmp 0x401737
mov ebx, 0x725c
add eax, 2
mov word [eax - 2], bx
jmp 0x401f40
mov edx, 0x745c
add eax, 2
mov word [eax - 2], dx
jmp 0x401f40
lea esi, [edx - 0x20]
cmp si, 0x5e
jbe 0x4026a0
mov esi, edx
mov byte [eax], 0x5c
add eax, 5
shr si, 0xc
movzx esi, si
movzx ebx, byte [esi + str.0123456789abcdef]
mov esi, edx
shr si, 8
and esi, 0xf
mov byte [eax - 4], bl
movzx ebx, byte [esi + str.0123456789abcdef]
mov esi, edx
and edx, 0xf
shr si, 4
movzx edx, byte [edx + str.0123456789abcdef]
and esi, 0xf
mov byte [eax - 3], bl
movzx ebx, byte [esi + str.0123456789abcdef]
mov byte [eax - 1], dl
mov byte [eax - 2], bl
jmp 0x401f40
mov esi, 0x225c
add eax, 2
mov word [eax - 2], si
jmp 0x401f40
mov byte [eax], 0x22
mov esi, dword [ebp - 0x5bc]
test ebx, ebx
jle 0x402740
mov ecx, 0x2e2e
mov byte [eax + 3], 0x2e
lea edx, [eax + 4]
mov word [eax + 1], cx
mov eax, dword [ebp - 0x5c0]
mov byte [edx], 0
mov dword [esp], eax
call fcn.00403a40
mov edx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.Searching_for_directories_with__s_n
mov dword [esp + 8], str.ATTRIB_processdirectory
mov dword [esp + 4], 0x404004
mov dword [esp], 3
call section..text
jmp 0x4017ab
lea edi, [edx - 0x20]
cmp di, 0x5e
jbe 0x4026d8
mov edi, edx
mov byte [eax], 0x5c
add eax, 5
shr di, 0xc
movzx edi, di
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, edx
shr di, 8
and edi, 0xf
mov byte [eax - 4], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, edx
and edx, 0xf
shr di, 4
movzx edx, byte [edx + str.0123456789abcdef]
and edi, 0xf
mov byte [eax - 3], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov byte [eax - 1], dl
mov byte [eax - 2], bl
jmp 0x402270
mov edi, 0x225c
add eax, 2
mov word [eax - 2], di
jmp 0x402270
lea edi, [edx - 0x20]
cmp di, 0x5e
jbe 0x4026ce
mov edi, edx
mov byte [eax], 0x5c
add eax, 5
shr di, 0xc
movzx edi, di
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, edx
shr di, 8
and edi, 0xf
mov byte [eax - 4], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov edi, edx
and edx, 0xf
shr di, 4
movzx edx, byte [edx + str.0123456789abcdef]
and edi, 0xf
mov byte [eax - 3], bl
movzx ebx, byte [edi + str.0123456789abcdef]
mov byte [eax - 1], dl
mov byte [eax - 2], bl
jmp 0x402080
mov edi, 0x225c
add eax, 2
mov word [eax - 2], di
jmp 0x402080
mov ebx, 0x725c
add eax, 2
mov word [eax - 2], bx
jmp 0x402270
mov edx, 0x745c
add eax, 2
mov word [eax - 2], dx
jmp 0x402270
mov ebx, 0x725c
add eax, 2
mov word [eax - 2], bx
jmp 0x402080
mov edx, 0x745c
add eax, 2
mov word [eax - 2], dx
jmp 0x402080
movzx eax, di
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401160
mov edx, eax
jmp 0x401fbe
mov byte [eax], 0x22
test edi, edi
jle 0x402782
mov ecx, 0x2e2e
mov byte [eax + 3], 0x2e
lea edx, [eax + 4]
mov word [eax + 1], cx
lea eax, [ebp - 0x268]
mov byte [edx], 0
mov dword [esp], eax
mov dword [ebp - 0x5c0], eax
call fcn.00403a40
mov dword [ebp - 0x5c8], eax
jmp 0x4021d9
lea ebx, [edx - 0x20]
cmp bx, 0x5e
jbe 0x40271d
mov ebx, edx
mov byte [eax], 0x5c
add eax, 5
shr bx, 0xc
movzx ebx, bx
movzx ebx, byte [ebx + str.0123456789abcdef]
mov byte [eax - 4], bl
mov ebx, edx
shr bx, 8
and ebx, 0xf
movzx ebx, byte [ebx + str.0123456789abcdef]
mov byte [eax - 3], bl
mov ebx, edx
and edx, 0xf
shr bx, 4
movzx edx, byte [edx + str.0123456789abcdef]
and ebx, 0xf
movzx ebx, byte [ebx + str.0123456789abcdef]
mov byte [eax - 1], dl
mov byte [eax - 2], bl
jmp 0x402170
mov edx, 0x225c
add eax, 2
mov word [eax - 2], dx
jmp 0x402170
mov edx, 0x725c
add eax, 2
mov word [eax - 2], dx
jmp 0x402170
mov ebx, 0x745c
add eax, 2
mov word [eax - 2], bx
jmp 0x402170
mov byte [eax], dl
add eax, 1
jmp 0x401f40
movzx eax, word [ebp - 0x5cc]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401160
mov edx, eax
jmp 0x4022f6
mov byte [eax], dl
add eax, 1
jmp 0x402080
mov byte [eax], dl
add eax, 1
jmp 0x402270
mov byte [ebp - 0x59a], 0x22
mov eax, 0x224c
mov word [ebp - 0x59c], ax
lea eax, [ebp - 0x59a]
lea edx, [eax + 1]
jmp 0x401fab
movzx eax, di
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401160
mov edx, eax
jmp 0x402425
mov byte [eax], dl
add eax, 1
jmp 0x402170
mov byte [ebp - 0x266], 0x22
mov eax, 0x224c
mov word [ebp - 0x268], ax
lea eax, [ebp - 0x266]
lea edx, [eax + 1]
jmp 0x402412
mov byte [ebp - 0x266], 0x22
mov eax, 0x224c
mov word [ebp - 0x268], ax
lea eax, [ebp - 0x266]
lea edx, [eax + 1]
jmp 0x4022e3
mov byte [ebp - 0x266], 0x22
mov eax, 0x224c
mov word [ebp - 0x268], ax
lea eax, [ebp - 0x266]
lea edx, [eax + 1]
jmp 0x4025d3