Function at 0x403cd0
Capabilities:
Check if file exists
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4599c7
mov eax, dword fs:[0]
push eax
sub esp, 0x5c8
mov eax, dword [0x4724e4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x5d4], ecx
cmp dword [ebp + 0x14], 0
setne al
movzx ecx, al
push ecx
lea ecx, [ebp - 0x234]
call fcn.00410760
mov dword [ebp - 4], 0
push 0x460c5a
lea ecx, [ebp - 0x238]
call fcn.00402580
mov byte [ebp - 4], 1
mov edx, dword [ebp + 8]
movsx eax, byte [edx]
test eax, eax
jne 0x403d72
mov dword [ebp - 0x5c4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x238]
call fcn.00403140
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.004107d0
mov eax, dword [ebp - 0x5c4]
jmp 0x404315
lea ecx, [ebp - 0x44c]
push ecx
mov ecx, dword [ebp - 0x5d4]
add ecx, 4
call fcn.00408d80
lea edx, [ebp - 0x344]
push edx
mov ecx, dword [ebp - 0x5d4]
add ecx, 4
call fcn.00408e40
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x5d4]
add ecx, 4
call fcn.00408d30
lea ecx, [ebp - 0x11c]
push ecx
mov ecx, dword [ebp - 0x5d4]
add ecx, 4
call fcn.00408f00
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x120], 0
jmp 0x403deb
mov edx, dword [ebp - 0x120]
add edx, 1
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp + 0xc]
jge 0x4041ae
mov ecx, dword [ebp - 0x120]
imul ecx, ecx, 0x31c
mov edx, dword [ebp + 8]
movzx eax, byte [edx + ecx + 0x10a]
cmp eax, 1
je 0x403e18
jmp 0x403ddc
movzx ecx, byte [ebp + 0x10]
cmp ecx, 1
jne 0x403e41
mov edx, dword [ebp - 0x120]
imul edx, edx, 0x31c
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + edx + 0x108]
cmp ecx, 1
je 0x403e3f
jmp 0x403ddc
jmp 0x403e62
mov edx, dword [ebp - 0x120]
imul edx, edx, 0x31c
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + edx + 0x108]
cmp ecx, 1
jne 0x403e62
jmp 0x403ddc
push 0x104
push 0
lea edx, [ebp - 0x554]
push edx
call fcn.004463a0
add esp, 0xc
mov eax, dword [ebp - 0x120]
imul eax, eax, 0x31c
mov ecx, dword [ebp + 8]
cmp dword [ecx + eax + 0x104], 0
jne 0x403ec7
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x554]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x120]
imul ecx, ecx, 0x31c
add ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x554]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x403fac
mov eax, dword [ebp - 0x120]
imul eax, eax, 0x31c
mov ecx, dword [ebp + 8]
cmp dword [ecx + eax + 0x104], 1
jne 0x403f16
lea edx, [ebp - 0x44c]
push edx
lea eax, [ebp - 0x554]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x120]
imul ecx, ecx, 0x31c
add ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x554]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x403fac
mov eax, dword [ebp - 0x120]
imul eax, eax, 0x31c
mov ecx, dword [ebp + 8]
cmp dword [ecx + eax + 0x104], 2
jne 0x403f62
lea edx, [ebp - 0x344]
push edx
lea eax, [ebp - 0x554]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x120]
imul ecx, ecx, 0x31c
add ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x554]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x403fac
mov eax, dword [ebp - 0x120]
imul eax, eax, 0x31c
mov ecx, dword [ebp + 8]
cmp dword [ecx + eax + 0x104], 3
jne 0x403fac
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x554]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x120]
imul ecx, ecx, 0x31c
add ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x554]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x554]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x404006
lea ecx, [ebp - 0x554]
push ecx
push 0x465188
lea edx, [ebp - 0x238]
push edx
call fcn.00402860
add esp, 0xc
lea ecx, [ebp - 0x238]
call fcn.00412a00
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [ebp - 0x120]
imul eax, eax, 0x31c
mov ecx, dword [ebp + 8]
mov byte [ecx + eax + 0x109], 0
jmp 0x4041a9
lea edx, [ebp - 0x554]
push edx
lea ecx, [ebp - 0x574]
call fcn.00405ba0
mov byte [ebp - 4], 2
push 0
push 0x465198
lea ecx, [ebp - 0x574]
call fcn.004045a0
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0xffffffff
je 0x404183
mov byte [ebp - 0x5c0], 0
xor eax, eax
mov dword [ebp - 0x5bf], eax
mov dword [ebp - 0x5bb], eax
mov dword [ebp - 0x5b7], eax
mov dword [ebp - 0x5b3], eax
mov word [ebp - 0x5af], ax
mov byte [ebp - 0x5ad], al
lea ecx, [ebp - 0x5c0]
push ecx
lea edx, [ebp - 0x554]
push edx
call fcn.004103c0
add esp, 8
push 0x14
lea eax, [ebp - 0x5c0]
push eax
push 0
lea ecx, [ebp - 0x590]
push ecx
mov ecx, dword [ebp - 0x5d4]
call fcn.00404360
mov byte [ebp - 4], 3
push str.231103_FileHash
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea ecx, [ebp - 0x590]
call fcn.004052f0
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.dM_9EFDgkwKbmFV9q6K6WU1PHhs
lea ecx, [ebp - 0x5ac]
call fcn.00405ba0
mov byte [ebp - 4], 4
lea edx, [ebp - 0x5ac]
push edx
lea eax, [ebp - 0x590]
push eax
call fcn.00404b50
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40414c
lea edx, [ebp - 0x554]
push edx
push 0x4651d8
lea eax, [ebp - 0x238]
push eax
call fcn.00402860
add esp, 0xc
lea ecx, [ebp - 0x238]
call fcn.00412a00
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea ecx, [ebp - 0x238]
call fcn.00412a00
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov ecx, dword [ebp - 0x120]
imul ecx, ecx, 0x31c
mov edx, dword [ebp + 8]
mov byte [edx + ecx + 0x109], 0
jmp 0x404163
mov eax, dword [ebp - 0x120]
imul eax, eax, 0x31c
mov ecx, dword [ebp + 8]
mov byte [ecx + eax + 0x109], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5ac]
call fcn.00405310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x590]
call fcn.00405310
jmp 0x40419a
mov edx, dword [ebp - 0x120]
imul edx, edx, 0x31c
mov eax, dword [ebp + 8]
mov byte [eax + edx + 0x109], 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x574]
call fcn.00405310
jmp 0x403ddc
mov dword [ebp - 0x120], 0
jmp 0x4041c9
mov ecx, dword [ebp - 0x120]
add ecx, 1
mov dword [ebp - 0x120], ecx
mov edx, dword [ebp - 0x120]
cmp edx, dword [ebp + 0xc]
jge 0x4042e4
mov eax, dword [ebp - 0x120]
imul eax, eax, 0x31c
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx + eax + 0x10a]
cmp edx, 1
je 0x4041f6
jmp 0x4041ba
movzx eax, byte [ebp + 0x10]
cmp eax, 1
jne 0x404270
mov ecx, dword [ebp - 0x120]
imul ecx, ecx, 0x31c
mov edx, dword [ebp + 8]
movzx eax, byte [edx + ecx + 0x108]
cmp eax, 1
je 0x40421d
jmp 0x4041ba
mov ecx, dword [ebp - 0x120]
imul ecx, ecx, 0x31c
mov edx, dword [ebp + 8]
movzx eax, byte [edx + ecx + 0x109]
test eax, eax
jne 0x40426e
mov dword [ebp - 0x5c8], 2
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x238]
call fcn.00403140
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.004107d0
mov eax, dword [ebp - 0x5c8]
jmp 0x404315
jmp 0x4042df
mov ecx, dword [ebp - 0x120]
imul ecx, ecx, 0x31c
mov edx, dword [ebp + 8]
movzx eax, byte [edx + ecx + 0x108]
cmp eax, 1
jne 0x404291
jmp 0x4041ba
mov ecx, dword [ebp - 0x120]
imul ecx, ecx, 0x31c
mov edx, dword [ebp + 8]
movzx eax, byte [edx + ecx + 0x109]
test eax, eax
jne 0x4042df
mov dword [ebp - 0x5cc], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x238]
call fcn.00403140
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.004107d0
mov eax, dword [ebp - 0x5cc]
jmp 0x404315
jmp 0x4041ba
mov dword [ebp - 0x5d0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x238]
call fcn.00403140
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.004107d0
mov eax, dword [ebp - 0x5d0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00441f6e
mov esp, ebp
pop ebp
ret 0x10