Function at 0x413eb3
Capabilities:
Check if file exists
Get file attributes
Resolve function by parsing pe exports
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x8d4
mov eax, dword [0x42e0b4]
xor eax, esp
mov dword [esp + 0x8d0], eax
push ebx
push esi
push edi
mov edi, edx
mov dword [esp + 0x54], 1
mov esi, ecx
mov dword [esp + 0x30], edi
xor ecx, ecx
or ebx, 0xffffffff
mov eax, ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x20]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x2c], ecx
test eax, eax
je 0x41fe30
mov eax, dword [eax + 0x1c]
shr eax, 1
and eax, 8
mov dword [esp + 0x58], ecx
mov dword [esp + 0x4c], eax
mov eax, 0x104
push eax
mov dword [esp + 0x28c], eax
lea eax, [esp + 0x7c]
push ecx
push eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x28c], ecx
mov byte [esp + 0x290], 1
call fcn.00417fbd
add esp, 0xc
mov byte [esp + 0x8cc], 1
mov eax, 0x104
xor ecx, ecx
mov dword [esp + 0x8d0], eax
mov dword [esp + 0x8c8], ecx
push eax
push ecx
lea eax, [esp + 0x6c8]
push eax
call fcn.00417fbd
add esp, 0xc
mov byte [esp + 0x6b4], 1
mov eax, 0x104
xor ecx, ecx
mov dword [esp + 0x6b8], eax
mov dword [esp + 0x6b0], ecx
push eax
push ecx
lea eax, [esp + 0x4b0]
push eax
call fcn.00417fbd
add esp, 0xc
mov byte [esp + 0x49c], 1
mov eax, 0x104
xor ecx, ecx
mov dword [esp + 0x4a0], eax
mov dword [esp + 0x498], ecx
push eax
push ecx
lea eax, [esp + 0x298]
push eax
call fcn.00417fbd
xor eax, eax
lea ecx, [esp + 0x84]
add esp, 0xc
cmp byte [esp + 0x284], al
sete al
dec eax
and eax, 0x7ee3
add eax, 0x104
push eax
call fcn.0040e3f0
test eax, eax
js 0x4208ed
xor eax, eax
lea ecx, [esp + 0x6c0]
cmp byte [esp + 0x8cc], al
sete al
dec eax
and eax, 0x7ee3
add eax, 0x104
push eax
call fcn.0040e3f0
test eax, eax
js 0x4208ed
xor eax, eax
lea ecx, [esp + 0x4a8]
cmp byte [esp + 0x6b4], al
sete al
dec eax
and eax, 0x7ee3
add eax, 0x104
push eax
call fcn.0040e3f0
test eax, eax
js 0x4208ed
xor eax, eax
lea ecx, [esp + 0x290]
cmp byte [esp + 0x49c], al
sete al
dec eax
and eax, 0xfdc6
add eax, 0x208
push eax
call fcn.0040e3f0
test eax, eax
js 0x4208ed
push 0x40234c
lea ecx, [esp + 0x4ac]
call fcn.0040a641
xor eax, eax
mov ecx, 0xfe00
push eax
lea eax, [esp + 0x48]
push eax
call fcn.0041522c
mov dword [esp + 0x24], eax
test eax, eax
je 0x4208ed
cmp dword [0x436708], 0
jne 0x41fe38
mov esi, dword [esi + 0x20]
mov dword [esp + 0x14], esi
test esi, esi
je 0x414545
mov edi, dword [esp + 0x14]
mov esi, dword [esi + 0x18]
mov ecx, dword [edi]
call fcn.00410060
lea ecx, [esp + 0x1c]
mov edx, eax
push ecx
push esi
xor ecx, ecx
push ecx
push 0x21
mov ecx, fcn.004159d0
call fcn.0041589a
test al, al
je 0x41fe61
mov esi, edi
cmp dword [0x43259c], 0
jne 0x420922
mov edx, dword [esp + 0x8c8]
test edx, edx
je 0x41fe84
push dword [esp + 0x8d0]
mov ecx, esi
call fcn.00414d28
cmp eax, 1
je 0x4208e4
cmp dword [0x43670c], 0
jne 0x4145d5
mov eax, dword [0x436704]
cmp eax, 3
je 0x41fe90
test byte [esi + 0x1c], 8
je 0x4146af
push dword [esi + 4]
push 0x402280
call fcn.00409950
cmp dword [0x436704], 3
pop ecx
pop ecx
je 0x41feb7
mov eax, dword [esp + 0x280]
test eax, eax
je 0x41fec9
mov edx, dword [esp + 0x30]
xor edi, edi
push edi
push dword [esp + 0x28c]
mov ecx, esi
push eax
call fcn.00413cd0
cmp eax, 1
je 0x4208e4
cmp dword [0x436704], 3
je 0x41fed2
mov eax, dword [esp + 0x280]
test eax, eax
je 0x41ff05
cmp word [eax], di
je 0x41450e
push ecx
push ecx
mov ecx, dword [esi + 4]
xor edx, edx
call fcn.0041654b
mov dword [esp + 0x20], eax
cmp eax, 0xffffffff
je 0x41ff0e
mov ecx, eax
call fcn.0040dd98
test eax, eax
jne 0x41ff58
cmp dword [0x436708], eax
jne 0x41ff80
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x28], ecx
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x48], ecx
test al, 4
jne 0x4145df
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x498]
test ecx, ecx
je 0x41ffca
push dword [esi + 4]
mov edx, dword [esp + 0x4a4]
call fcn.00411cd5
mov ecx, dword [esp + 0x280]
mov edi, eax
test ecx, ecx
je 0x41ffd6
call fcn.00410060
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
push eax
push ebx
push esi
lea eax, [esp + 0x24]
push eax
push 0x200
call fcn.00414ca0
cmp dword [0x4367a8], 0
mov dword [esp + 0x6c], eax
jne 0x41ffdf
mov esi, dword [0x436704]
cmp esi, 3
je 0x420006
mov eax, dword [esp + 0x280]
test eax, eax
je 0x42001c
mov edx, dword [esp + 0x498]
test edx, edx
je 0x420025
push eax
mov ecx, edi
call fcn.00413aef
mov esi, dword [esp + 0x14]
test eax, eax
jne 0x420031
mov ecx, dword [esp + 0x30]
xor edx, edx
inc edx
xor eax, eax
mov dword [0x436770], edx
cmp dword [0x43670c], eax
jne 0x414602
mov eax, dword [esp + 0x280]
test eax, eax
je 0x4200ad
push edx
push dword [esp + 0x28c]
mov edx, ecx
mov ecx, esi
push eax
call fcn.00413cd0
cmp eax, 1
je 0x4208db
mov eax, dword [esp + 0x280]
mov ecx, eax
test eax, eax
je 0x4200b6
xor edx, edx
cmp word [ecx], dx
je 0x4200bf
test eax, eax
je 0x4200cd
mov edx, dword [esp + 0x498]
test edx, edx
je 0x4200d6
push eax
mov ecx, edi
call fcn.00413aef
test eax, eax
jne 0x4200e2
mov eax, dword [esp + 0x280]
test eax, eax
je 0x420141
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
mov ecx, dword [esp + 0x2c]
mov edx, eax
mov esi, dword [0x436704]
test ecx, ecx
je 0x414643
mov edi, dword [esp + 0x14]
cmp dword [0x43670c], 0
jne 0x41468c
test dl, 6
je 0x4146bd
or ebx, 0xffffffff
mov dword [0x4367a8], 5
mov dword [esp + 0x10], ebx
xor eax, eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x40], eax
cmp dword [esp + 0x5c], 1
mov edx, dword [esp + 0x2c]
je 0x4201f3
mov ecx, dword [edi + 0x1c]
mov eax, ecx
test cl, 8
je 0x414713
mov ecx, eax
test al, 8
je 0x4143d6
cmp esi, 3
je 0x42022d
mov edi, dword [esp + 0x24]
lea edx, [esp + 0x18]
push ecx
mov ecx, edi
call fcn.00414c75
cmp esi, 3
mov esi, dword [esp + 0x14]
je 0x4205df
mov eax, dword [esi + 0x1c]
test al, 1
je 0x4205df
mov ecx, 0x800
mov ebx, eax
and ebx, ecx
mov edi, ebx
neg edi
sbb edi, edi
and edi, ecx
mov ecx, dword [esp + 0x10]
cmp ecx, 0xffffffff
jne 0x414723
test eax, 0x400
jne 0x420250
mov esi, dword [0x4325b8]
test esi, esi
je 0x4202b6
mov ecx, dword [esp + 0x280]
test ecx, ecx
je 0x4202de
mov eax, dword [esp + 0x4c]
or eax, edi
mov edi, dword [esp + 0x14]
push eax
push 0x43259c
xor eax, eax
push eax
push eax
push ecx
push dword [edi + 4]
mov ecx, esi
call dword [0x44a4c4]
call esi
xor edi, edi
mov esi, dword [esp + 0x14]
test eax, eax
je 0x4202e7
cmp dword [esp + 0x40], 0
jne 0x4144bd
mov eax, dword [esp + 0x280]
test eax, eax
je 0x420375
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4144b0
mov ecx, dword [esp + 0x280]
test ecx, ecx
je 0x42037e
and eax, 0xfffffffe
push eax
push ecx
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
cmp dword [0x436708], 0
jne 0x420387
mov ebx, dword [esp + 0x10]
mov ecx, dword [esi + 0x18]
mov dword [0x4367a0], edi
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x70], eax
mov eax, dword [ecx + 0x18]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x74], eax
call fcn.0040a16c
cmp dword [0x436704], 3
je 0x414508
cmp dword [0x43259c], 0
jne 0x420862
mov edx, dword [esp + 0x30]
lea eax, [esp + 0x70]
push eax
push ebx
mov ecx, esi
call fcn.00414c40
mov dword [0x43670c], edi
push dword [esp + 0x1c]
mov edx, dword [esi + 0x18]
mov ecx, fcn.004159d0
push 0x21
call fcn.00415851
test al, al
jne 0x41410d
mov ecx, dword [esp + 0x1c]
call fcn.00408b4d
mov esi, dword [esi + 0x20]
mov dword [esp + 0x14], esi
test esi, esi
jne 0x4140de
mov edi, dword [esp + 0x30]
cmp dword [0x436704], 3
je 0x420939
mov eax, dword [esp + 0x498]
xor ebx, ebx
mov dword [esp + 0x498], ebx
test eax, eax
je 0x41456e
push eax
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
pop ecx
mov eax, dword [esp + 0x6b0]
mov dword [esp + 0x6b0], ebx
test eax, eax
je 0x414588
push eax
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
pop ecx
mov eax, dword [esp + 0x8c8]
mov dword [esp + 0x8c8], ebx
test eax, eax
je 0x4145a2
push eax
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
pop ecx
mov ecx, dword [esp + 0x280]
mov dword [esp + 0x280], ebx
test ecx, ecx
je 0x4145bc
push ecx
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
pop ecx
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x8dc]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00416b30
mov esp, ebp
pop ebp
ret
mov eax, dword [0x436704]
jmp 0x41415b
and eax, 0xfffffffb
test al, 0x80
push 0
pop ecx
setne cl
inc ecx
or ecx, eax
cmp byte [0x436755], 0
mov dword [esi + 0x1c], ecx
jne 0x414223
jmp 0x41ff99
cmp dword [ecx + 0x20], eax
je 0x4142de
mov dword [0x4367a8], eax
mov ecx, dword [ecx + 0x20]
mov dword [0x43676c], edx
call fcn.00408f21
mov eax, dword [0x4367a8]
cmp eax, 0x15
je 0x4208d0
cmp eax, 0x458
je 0x4208d0
mov ecx, dword [esp + 0x30]
xor edx, edx
inc edx
jmp 0x4142de
cmp dword [esp + 0x54], 0
je 0x414662
xor eax, eax
mov dword [esp + 0x3c], eax
cmp edx, 0xffffffff
je 0x41465e
test dl, 0x10
jne 0x42014a
mov dword [esp + 0x54], eax
mov edi, dword [esp + 0x14]
mov eax, dword [edi + 0x1c]
and eax, 0xfffffffb
cmp byte [0x436755], 0
mov dword [edi + 0x1c], eax
je 0x420157
cmp dword [esp + 0x3c], 0
je 0x414379
jmp 0x42019c
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x20]
test eax, eax
je 0x4146a1
test byte [eax + 0x1c], 8
jne 0x414737
cmp esi, 3
jne 0x414386
jmp 0x4201b2
cmp eax, 3
jne 0x414181
jmp 0x414165
test dword [edi + 0x1c], 0x400
jne 0x4146e2
mov ecx, dword [esp + 0x280]
test ecx, ecx
je 0x414750
call fcn.00415643
mov esi, dword [0x436704]
mov ebx, eax
mov dword [esp + 0x10], ebx
xor eax, eax
mov dword [esp + 0x40], eax
cmp ebx, 0xffffffff
je 0x4143a2
mov ecx, ebx
mov dword [esp + 0x50], 1
call fcn.0040dd98
test eax, eax
jne 0x4201cf
mov esi, dword [0x436704]
jmp 0x4143aa
mov eax, ecx
cmp esi, 3
jne 0x4143c7
jmp 0x420215
call fcn.0040a16c
mov eax, dword [esi + 0x1c]
or ecx, 0xffffffff
mov dword [esp + 0x10], ecx
jmp 0x41441c
xor eax, eax
cmp dword [edi + 0x20], eax
jne 0x4146a1
xor esi, esi
inc esi
mov dword [0x436704], esi
jmp 0x4146a1
lea ecx, [esp + 0x78]
jmp 0x4146d1
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
add eax, 0x28
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
movzx edx, word [ecx + 6]
cmp dword [ebp - 0x14], edx
jge 0x41feab
mov eax, dword [ebp - 8]
clc
cmp dword [eax + 0x10], 0
je 0x41fea6
mov ecx, dword [ebp - 8]
dec ebp
clc
mov edx, dword [ecx + 0x24]
push edx
call fcn.0041f1c0
add esp, 4
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp - 8]
add ecx, dword [edx + 0xc]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
call 0xe48f89b6
push ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x10]
push eax
mov eax, dword [ebp - 0x20]
cdq
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call fcn.004198a0
add esp, 0x18
movzx eax, al
test eax, eax
jne 0x41fea6
rol byte [ebp - 0x72e28a40], 0x4d
call 0xe49789e1
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x38]
call edx
jmp 0x41fe10
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x58]
push ecx
pop eax
call edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x58]
pop eax
call eax
mov ecx, 8
imul edx, ecx, 9
mov eax, dword [ebp - 4]
lea ecx, [eax + edx + 0x78]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
cmp dword [edx + 4], 0
je 0x41ff2e
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp - 0x24]
add ecx, dword [edx]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc], ecx
jmp 0x41ff12
dec ebp
hlt
mov edx, dword [ebp - 0xc]
add edx, 4
mov dword [ebp - 0xc], edx
add al, 0x89
push ebp
hlt
mov eax, dword [ebp - 0xc]
cmp dword [eax], 0
je 0x41ff2e
push 0
push 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
push edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call ecx
jmp 0x41ff09
mov edx, dword [ebp - 4]
cmp dword [edx + 0x28], 0
jne 0x41ff41
mov eax, 1
jmp 0x420009
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp + 8]
cmp dword [edx + 0x54], 0
jne 0x420004
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x64]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call fcn.0041f130
add esp, 8
test eax, eax
jne 0x41ff81
inc ebp
or byte [ebx - 0x74ae9bb8], cl
push ebp
or byte [ebx - 0x3817affe], cl
int1
invalid
push 0
push 0xffffffffffffffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x200]
call eax
ror byte [ebx - 0x17aef7b3], 1
out 0xfb, al
invalid
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041fb70
add esp, 4
cmp dword [ebp - 0x30], 0
jne 0x41ffe7
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 4]
add eax, dword [ecx + 0x28]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp + 8]
push edx
call fcn.00420010
add esp, 4
push 0x3e8
push 0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
call fcn.00417696
add esp, 8
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041fc10
add esp, 8
call fcn.004174af
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
call dword [ebp - 0x10]
jmp 0x420004
inc ebp
int3
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp - 4]
add edx, dword [eax + 0x28]
mov dword [ebp - 0x28], edx
push 0
push 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
push edx
call dword [ebp - 0x28]
mov eax, 1
add byte [eax], al
add byte [ebx - 0x333ca21b], cl
int3
mov esp, ebp
pop ebp
ret
inc ebp
cld
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov dword [eax + 8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
add eax, dword [ecx + 0x3c]
mov dword [ebp - 8], eax
push ecx
sbb byte [ecx + 0x458b0850], cl
or byte [ebx + 0x558b1848], cl
push ebp
or byte [ebx + 0x41031842], cl
cmp al, 0x89
inc ebp
clc
mov ecx, dword [ebp - 8]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov dword [ecx + 0x34], eax
mov esp, ebp
pop ebp
ret
int3
add dword [ebp + 0x12], esi
mov eax, dword [ebp + 0x10]
xor edx, edx
mov eax, dword [eax + 0x50]
inc eax
push eax
jmp 0x42016e
or al, 2
jne 0x4200e4
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 0x30]
mov edx, dword [ecx + 0x34]
jmp 0x42016e
xor byte [ebx - 0x7016cbaf], cl
add byte [eax], al
add cl, ch
test byte [eax], al
add byte [eax], al
cmp dword [ebp + 0xc], 3
jne 0x4200f8
mov edx, dword [ebp + 0x10]
xor ecx, ecx
mov eax, dword [edx + 0x28]
mov edx, ecx
jmp 0x42016e
cmp dword [ebp + 0xc], 0
jne 0x42010c
mov edx, dword [ebp + 0x10]
xor ecx, ecx
mov eax, dword [edx + 0x54]
mov edx, ecx
jmp 0x42016e
cmp dword [ebp + 0xc], 4
jne 0x42011e
mov edx, dword [ebp + 0x10]
movzx eax, word [edx + 6]
cdq
jmp 0x42016e
cmp dword [ebp + 0xc], 5
jne 0x42013b
mov eax, 8
imul ecx, eax, 5
mov edx, dword [ebp + 0x10]
lea eax, [edx + ecx + 0x88]
cdq
jmp 0x42016e
cmp dword [ebp + 0xc], 6
jne 0x420158
mov eax, 8
shl eax, 0
mov ecx, dword [ebp + 0x10]
lea eax, [ecx + eax + 0x88]
dec ebp
adc byte [ebp + 0x880184], cl
add byte [eax], al
cdq
jmp 0x42016e
adc byte [ebx + 0x75070c7d], al
or cl, byte [ebx - 0x48f0efab]
inc edx
push ss
cmp dword [ebp + 0xc], 7
jne 0x420168
mov edx, dword [ebp + 0x10]
movzx eax, word [edx + 0x16]
cdq
jmp 0x42016e
or eax, 0xffffffff
or edx, 0xffffffff
pop ebp
ret
add byte [eax], al
jmp 0x42021e
jmp 0x42021e
push ebp
adc byte [edi], cl
mov bh, 0x42
push es
cdq
jmp 0x420224
sub al, byte [ebx + 0x75060c7d]
adc al, 0xb8
or byte [eax], al
add byte [eax], al
shl eax, 0
mov ecx, dword [ebp + 0x10]
lea eax, [ecx + eax + 0x78]
cdq
jmp 0x420224
push ebp
adc byte [edi], cl
mov bh, 0x42
push ss
cdq
jmp 0x420224
or eax, 0xffffffff
or edx, 0xffffffff
pop ebp
ret
int3
sbb al, 0x8b
dec ebp
clc
int3
dec ebp
sar byte [edi + 0x44], 1
invalid
or byte [ebx + 0x4d2b2048], cl
fmul qword [ebx + 0x4a890855]
or al, 0x8b
inc ebp
or byte [ecx + 0x458b0c4a], cl
or byte [ebx + 0x6a510848], cl
or byte [ecx + 0x6a], dl
pop es
mov edx, dword [ebp + 0xc]
push edx
call fcn.004197f0
add esp, 8
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x64], eax
push 0xe9fa5fec
mov edx, dword [ebp + 0xc]
push edx
call fcn.004197f0
add esp, 8
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x60], eax
push 0x3e569f5
mov edx, dword [ebp + 0xc]
push edx
call fcn.004197f0
add esp, 8
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x68], eax
push 0xa0a76acb
mov edx, dword [ebp + 0xc]
push edx
call fcn.004197f0
add esp, 8
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x6c], eax
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
cmp dword [eax + 0x34], 0
je 0x4208ca
mov byte [ebp - 1], 1
jmp 0x4208ce
mov byte [ebp - 1], 0
mov ecx, dword [ebp + 8]
mov dl, byte [ebp - 1]
mov byte [ecx + 0x80], dl
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
or byte [edx - 0x6e7700ab], cl
add byte [eax], 0
add byte [ebx + 0x88b1045], cl
inc ebp
adc byte [ebx - 0x7eee74f8], cl
ret 0x1f0
mov edx, dword [ecx]
add edx, 0x1f0
mov eax, dword [ebp + 8]
mov dword [eax + 0x7c], edx
add dword [eax], eax
add byte [ebx + 0x50890845], cl
jl 0x420879
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
mov eax, dword [edx]
add eax, 0xe0
dec ebp
adc byte [ebx + 0x5028b11], cl
loopne 0x4208f7
add byte [eax], al
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x84], eax
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0041cf00
add esp, 0xc
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x420942
xor al, al
jmp 0x420a4f
mov dword [ebp - 0x10], 0
push 0x192a4446
lea edx, [ebp - 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.0041cf00
add esp, 0xc
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x42096e
xor al, al
jmp 0x420a4f
push 0x20a
push 0x40
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
call edx
mov dword [ebp - 4], eax
push 0x20a
push 0x40
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1c]
call ecx
mov dword [ebp - 0xc], eax
push 0x105
push 0x40
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.00417331
add esp, 0xc
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
call fcn.00417528
push 0x104
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x24]
call ecx
mov edx, dword [ebp - 4]
mov ecx, dword [ebp + 8]
call fcn.00417d1b
movzx edx, al
test edx, edx
jne 0x4209ee
xor al, al
jmp 0x420a4f
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 4]
mov dword [eax], ecx
mov edx, dword [ebp - 4]
mov ecx, dword [ebp + 8]
call fcn.00417bde
movzx edx, al
test edx, edx
jne 0x420a29
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 4]
call fcn.00417c41
add esp, 8
movzx edx, al
test edx, edx
jne 0x420a29
xor al, al
jmp 0x420a4f
cmp dword [ebp - 8], 0
je 0x420a3b
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
call edx
cmp dword [ebp - 0xc], 0
je 0x420a4d
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
call edx
mov al, 1
mov esp, ebp
pop ebp
ret