Function at 0x413430
Capabilities:
Resolve function by parsing pe exports
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x40cc
call fcn.00458ea0
mov eax, dword [0x485370]
xor eax, esp
mov dword [esp + 0x40c8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor esi, esi
push esi
push 0x80
push 3
push esi
push 1
push SysReAllocString
push eax
mov dword [esp + 0x48], ecx
xor ebx, ebx
mov dword [esp + 0x5c], esi
mov dword [esp + 0x40], 0x413b50
mov dword [esp + 0x44], 0x413b30
mov dword [esp + 0x60], 0x413b50
mov dword [esp + 0x64], 0x413b30
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esp + 0x54], eax
cmp eax, 0xffffffff
jne 0x4134b9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
je 0x4134b9
push str.can_not_open_input_file
push str._nERROR:__s_n
jmp 0x4138a7
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], 0x413a90
mov dword [esp + 0x50], 0x413ac0
mov dword [esp + 0xb0], 0x4162a0
mov dword [esp + 0xb4], 0x416300
mov dword [esp + 0xb8], 0x416310
mov dword [esp + 0xbc], 0x416370
mov dword [esp + 0xc0], edx
mov dword [esp + 0xc8], esi
mov dword [esp + 0xc4], esi
call fcn.004163a0
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x4c]
lea ecx, [esp + 0x2c]
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], esi
mov dword [esp + 0x80], esi
mov dword [esp + 0x84], esi
mov dword [esp + 0x98], esi
mov dword [esp + 0x9c], esi
mov dword [esp + 0xa0], esi
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], esi
mov dword [esp + 0xb0], esi
call fcn.00415c30
add esp, 8
mov dword [esp + 0x18], eax
cmp eax, esi
je 0x4135a0
lea edi, [esp + 0x24]
lea eax, [esp + 0x60]
call fcn.00413d40
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
cmp eax, esi
jne 0x413808
xor eax, eax
mov dword [esp + 0x58], 0xffffffff
mov dword [esp + 0x20], esi
mov dword [esp + 0x5c], esi
mov dword [esp + 0x14], eax
cmp dword [esp + 0x7c], esi
jbe 0x4137f7
mov dword [esp + 0x30], esi
mov ecx, dword [esp + 0x30]
add ecx, dword [esp + 0x70]
mov dword [esp + 0x38], esi
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x34], esi
mov esi, dword [ecx + eax*4 + 4]
sub esi, dword [ecx + eax*4]
lea edi, [ecx + eax*4 + 4]
cmp esi, dword [esp + 0x40]
jbe 0x41362f
push ebx
call fcn.00450267
add esp, 4
mov dword [esp + 0x40], esi
add esi, esi
je 0x4137c1
push esi
call fcn.004501d3
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x4137c3
mov ecx, dword [esp + 0xa0]
mov eax, dword [esp + 0x14]
mov eax, dword [ecx + eax*4]
mov ecx, dword [edi]
sub ecx, eax
test ebx, ebx
je 0x413660
mov edx, dword [esp + 0xa4]
lea edx, [edx + eax*2]
test ecx, ecx
je 0x413660
mov eax, ebx
sub edx, ebx
lea esp, [esp]
mov si, word [edx + eax]
mov word [eax], si
add eax, 2
dec ecx
jne 0x413650
lea ecx, [ecx]
call fcn.00452f8e
add eax, 0x20
push eax
push str.Extracting
call fcn.00458f42
add esp, 8
mov eax, ebx
call fcn.004133e0
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4137f5
mov eax, dword [esp + 0x1c]
cmp byte [eax + 0x19], 0
je 0x4136a2
push 0x47ba5c
call fcn.004529ab
add esp, 4
jmp 0x4136ed
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x6c]
push edx
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x70]
push ecx
push edx
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0x84]
call fcn.00416000
add esp, 0x24
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4137f5
xor edi, edi
cmp word [ebx], di
je 0x413721
mov esi, ebx
cmp word [esi], 0x2f
jne 0x413716
xor ecx, ecx
mov word [esi], cx
mov ecx, dword [esp + 0x2c]
push ebx
call fcn.004132f0
mov edx, 0x5c
add esp, 4
mov word [esi], dx
inc edi
cmp word [ebx + edi*2], 0
lea esi, [ebx + edi*2]
jne 0x4136f6
mov eax, dword [esp + 0x1c]
cmp byte [eax + 0x19], 0
mov ecx, dword [esp + 0x2c]
push ebx
je 0x41373a
call fcn.004132f0
add esp, 4
jmp 0x413799
lea esi, [esp + 0x1c]
call fcn.00413360
add esp, 4
test eax, eax
jne 0x4137cd
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x20]
add eax, dword [esp + 0x38]
mov dword [esp + 0x3c], ecx
mov ecx, esi
push ecx
lea edi, [esp + 0x40]
call fcn.00413980
add esp, 4
test eax, eax
jne 0x4137db
mov edx, dword [esp + 0x34]
cmp dword [esp + 0x3c], edx
jne 0x4137db
call fcn.004138d0
test eax, eax
jne 0x4137d4
mov eax, dword [esp + 0x1c]
cmp byte [eax + 0x1d], 0
je 0x413799
mov eax, dword [eax + 0x14]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0x47ba60
call fcn.004529ab
mov eax, dword [esp + 0x18]
add dword [esp + 0x34], 0x20
inc eax
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, dword [esp + 0x7c]
jae 0x4137f5
xor esi, esi
jmp 0x4135d0
xor ebx, ebx
mov dword [esp + 0x10], 2
jmp 0x4137f5
push str.can_not_open_output_file
jmp 0x4137e0
push str.can_not_close_output_file
jmp 0x4137e0
push str.can_not_write_output_file
push str._nERROR:__s_n
call fcn.004529ab
add esp, 8
mov dword [esp + 0x10], 0xb
xor esi, esi
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0x28]
push edx
call dword [esp + 0x30]
add esp, 8
lea edi, [esp + 0x24]
lea eax, [esp + 0x60]
call fcn.00413d40
push ebx
call fcn.00450267
mov eax, dword [esp + 0x58]
add esp, 4
cmp eax, 0xffffffff
je 0x413842
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x41383a
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x413842
mov dword [esp + 0x54], 0xffffffff
mov eax, dword [esp + 0x10]
cmp eax, esi
jne 0x41386e
push str._nEverything_is_Ok_n
call fcn.004529ab
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x40c8]
xor ecx, esp
call fcn.004501c4
mov esp, ebp
pop ebp
ret
cmp eax, 4
jne 0x41387f
push str.decoder_doesnt_support_this_archive
push str._nERROR:__s_n
jmp 0x4138a7
cmp eax, 2
jne 0x413890
push str.can_not_allocate_memory
push str._nERROR:__s_n
jmp 0x4138a7
cmp eax, 3
jne 0x4138a1
push str.CRC_error
push str._nERROR:__s_n
jmp 0x4138a7
push eax
push str._nERROR__d_n
call fcn.004529ab
mov ecx, dword [esp + 0x40dc]
add esp, 8
pop edi
pop esi
pop ebx
xor ecx, esp
mov eax, 1
call fcn.004501c4
mov esp, ebp
pop ebp
ret