Function at 0x41e9e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42c482
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x438008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0xc]
mov edx, 0x400
mov ecx, dword [ebp + 8]
test eax, eax
mov dword [ebp - 0xd4], ecx
mov ecx, dword [esi + 0x14]
cmovne edx, eax
test ecx, ecx
jne 0x41ea31
xor ebx, ebx
jmp 0x41ea34
mov ebx, dword [esi + 0xc]
mov dword [ebp - 0xd8], ebx
test edx, edx
jns 0x41ea49
lea edi, [ecx + ebx]
mov dword [ebp - 0x108], edi
jmp 0x41ea5b
cmp ecx, edx
cmovl edx, ecx
lea edi, [edx + ebx]
mov dword [ebp - 0x108], edi
cmp ecx, edx
jne 0x41ea72
mov esi, dword [ebp - 0xd4]
push ecx
push 0x42f08c
push esi
call fcn.00422450
add esp, 0xc
jmp 0x41ea8d
mov esi, dword [ebp - 0xd4]
mov eax, ecx
sub eax, edx
push eax
push edx
push ecx
push 0x42f0b0
push esi
call fcn.00422450
add esp, 0x14
mov dword [ebp - 0x10c], 0
cmp ebx, edi
jae 0x41f0c2
lea edi, [esi + 0x10]
mov dword [ebp - 0x114], edi
mov ecx, esi
call fcn.00421960
mov edx, eax
mov eax, dword [edx + 0x14]
cmp eax, 2
jb 0x41eacc
mov ecx, dword [edx + 0xc]
movzx ecx, word [ecx + eax - 2]
test cx, cx
jne 0x41eacc
add eax, 0xfffffffe
mov dword [edx + 0x14], eax
mov eax, dword [edi + 0x10]
mov esi, dword [edi + 0x14]
sub eax, esi
cmp eax, 8
jl 0x41eaf1
mov eax, dword [edi + 0xc]
mov dword [esi + eax], 0xa000d
mov dword [esi + eax + 4], 0x5b
add dword [edi + 0x14], 8
jmp 0x41eb0b
lea eax, [esi + 8]
mov ecx, edi
push eax
call fcn.0041f0e0
mov dword [eax + esi], 0xa000d
mov dword [eax + esi + 4], 0x5b
push ecx
mov ecx, dword [ebp - 0x10c]
lea eax, [ebp - 0xd0]
push eax
call fcn.0041f9a0
mov ecx, dword [ebp - 0xd4]
add esp, 8
push eax
call fcn.00422040
mov ecx, dword [ebp - 0xd4]
call fcn.00421960
mov edx, eax
mov eax, dword [edx + 0x14]
cmp eax, 2
jb 0x41eb55
mov ecx, dword [edx + 0xc]
movzx ecx, word [ecx + eax - 2]
test cx, cx
jne 0x41eb55
add eax, 0xfffffffe
mov dword [edx + 0x14], eax
mov esi, dword [edi + 0x14]
mov ecx, edi
lea eax, [esi + 6]
push eax
call fcn.0041f0e0
mov ecx, dword [0x42f0fc]
mov dword [eax + esi], ecx
mov cx, word [0x42f100]
mov word [eax + esi + 4], cx
mov dword [ebp - method.CWString.virtual_0], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xf4], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - method.CWString.virtual_0], vtable.CWString.0
mov dword [ebp - 0x128], eax
mov dword [ebp - 0xf4], vtable.CVolObject.0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0xf4], vtable.CVolMem.0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xdc], 0x40
mov byte [ebp - 4], 2
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xdc], 0xfe
mov dword [ebp - 4], 3
xor ecx, ecx
mov dword [ebp - 0x110], ecx
cmp ebx, dword [ebp - 0x108]
jae 0x41ef24
nop
cmp ecx, 0x10
jge 0x41ef24
mov ecx, dword [ebp - 0xd4]
call fcn.00421960
mov edx, eax
mov eax, dword [edx + 0x14]
cmp eax, 2
jb 0x41ec81
mov ecx, dword [edx + 0xc]
movzx ecx, word [ecx + eax - 2]
test cx, cx
jne 0x41ec81
add eax, 0xfffffffe
mov dword [edx + 0x14], eax
mov eax, dword [edi + 0x10]
mov esi, dword [edi + 0x14]
sub eax, esi
mov dword [ebp - 0x11c], 0x20
cmp eax, 4
jl 0x41ecaa
mov ecx, dword [edi + 0xc]
mov eax, dword [ebp - 0x11c]
mov dword [esi + ecx], eax
add dword [edi + 0x14], 4
jmp 0x41ecbe
lea eax, [esi + 4]
mov ecx, edi
push eax
call fcn.0041f0e0
mov ecx, dword [ebp - 0x11c]
mov dword [eax + esi], ecx
movzx ecx, byte [ebx]
mov eax, ecx
and ecx, 0xf
shr eax, 4
test eax, eax
je 0x41ece6
movzx eax, word [eax*2 + str.0123456789ABCDEF]
lea edx, [ebp - 0x50]
mov word [ebp - 0x50], ax
movzx eax, word [ecx*2 + str.0123456789ABCDEF]
jmp 0x41ed01
mov ax, word [eax*2 + str.0123456789ABCDEF]
mov word [ebp - 0x50], ax
mov ax, word [ecx*2 + str.0123456789ABCDEF]
test ecx, ecx
je 0x41ed17
lea edx, [ebp - 0x4e]
mov word [ebp - 0x4e], ax
lea ecx, [ebp - 0x50]
xor eax, eax
cmp edx, ecx
mov word [ebp - 0x4c], ax
mov eax, ecx
cmovb eax, edx
jmp 0x41ed24
mov word [ebp - 0x4e], ax
xor eax, eax
mov word [ebp - 0x4c], ax
lea eax, [ebp - 0x50]
lea edx, [ebp - 0xd0]
sub edx, eax
nop dword [eax]
movzx ecx, word [eax]
lea eax, [eax + 2]
mov word [eax + edx - 2], cx
test cx, cx
jne 0x41ed30
mov ecx, dword [ebp - 0xd4]
lea eax, [ebp - 0xd0]
push eax
call fcn.00422040
movzx eax, byte [ebx]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isprint]
add esp, 4
test eax, eax
je 0x41ed73
movzx eax, byte [ebx]
mov esi, eax
test ax, ax
je 0x41eefe
jmp 0x41ed78
mov esi, 0x2e
lea ecx, [ebp - 0x104]
movzx ebx, si
call fcn.00421960
mov edx, eax
mov eax, dword [edx + 0x14]
cmp eax, 2
jb 0x41eda5
mov ecx, dword [edx + 0xc]
movzx ecx, word [ecx + eax - 2]
test cx, cx
jne 0x41eda5
add eax, 0xfffffffe
mov esi, ebx
mov dword [edx + 0x14], eax
mov edx, dword [ebp - 0xe4]
xor eax, eax
mov ebx, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xe8]
mov word [ebp - 0x122], ax
mov eax, edx
sub eax, ebx
mov word [ebp - 0x124], si
cmp eax, 4
jl 0x41ede5
mov eax, dword [ebp - 0x124]
mov dword [ecx + ebx], eax
add dword [ebp - 0xe0], 4
jmp 0x41eef8
lea edi, [ebx + 4]
cmp edi, ebx
je 0x41eee9
test edi, edi
jne 0x41ee42
test ecx, ecx
je 0x41ee1d
mov eax, dword [ebp - 0xf4]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41ee15
mov ecx, 0x438d88
call fcn.0041fed0
jmp 0x41ee1d
lea ecx, [ebp - 0xf4]
call eax
mov dword [ebp - 0xe8], 0
xor ecx, ecx
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xe4], 0
jmp 0x41eee9
mov esi, dword [ebp - 0xdc]
mov eax, 0x40
test ecx, ecx
jne 0x41ee91
test esi, esi
cmovle esi, eax
mov eax, edi
cdq
idiv esi
mov eax, dword [ebp - 0xf4]
sub esi, edx
add esi, edi
push esi
mov eax, dword [eax]
cmp eax, method.CWString.virtual_0
jne 0x41ee87
mov ecx, 0x438d88
call fcn.0041fdf0
mov ecx, eax
test ecx, ecx
jne 0x41eed7
push 0xffffffffffffffff
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea ecx, [ebp - 0xf4]
call eax
jmp 0x41eed5
test esi, esi
cmovle esi, eax
cmp edx, edi
jl 0x41eea0
sub edx, edi
cmp edx, esi
jle 0x41eee3
mov eax, edi
cdq
idiv esi
mov eax, dword [ebp - 0xf4]
sub esi, edx
add esi, edi
push esi
mov eax, dword [eax + 8]
push ecx
cmp eax, method.CWString.virtual_8
jne 0x41eecd
mov ecx, 0x438d88
call fcn.0041fe40
mov ecx, eax
test ecx, ecx
je 0x41ee7f
jmp 0x41eed7
lea ecx, [ebp - 0xf4]
call eax
mov ecx, eax
mov dword [ebp - 0xe4], esi
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xe0], edi
mov eax, dword [ebp - 0x124]
mov edi, dword [ebp - 0x114]
mov dword [ecx + ebx], eax
mov ebx, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x110]
inc ebx
inc dword [ebp - 0x10c]
inc ecx
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0xd8], ebx
cmp ebx, dword [ebp - 0x108]
jb 0x41ec50
mov eax, 0x10
sub eax, ecx
lea ebx, [eax + eax*2]
test ebx, ebx
jle 0x41ef8b
mov esi, dword [ebp - 0xd4]
mov ecx, esi
call fcn.00421960
mov edx, eax
mov eax, dword [edx + 0x14]
cmp eax, 2
jb 0x41ef5c
mov ecx, dword [edx + 0xc]
movzx ecx, word [ecx + eax - 2]
test cx, cx
jne 0x41ef5c
add eax, 0xfffffffe
mov dword [edx + 0x14], eax
mov esi, dword [esi + 0x24]
add ebx, ebx
mov ecx, edi
lea eax, [esi + 2]
add eax, ebx
push eax
call fcn.0041f0e0
mov ecx, ebx
shr ecx, 1
shr ecx, 1
lea edx, [esi + eax]
mov eax, 0x200020
mov edi, edx
rep stosd dword es:[edi], eax
adc ecx, ecx
rep stosw word es:[edi], ax
xor eax, eax
mov word [edx + ebx], ax
mov ecx, dword [ebp - 0xd4]
call fcn.00421960
mov edx, eax
mov eax, dword [edx + 0x14]
cmp eax, 2
jb 0x41efb3
mov ecx, dword [edx + 0xc]
movzx ecx, word [ecx + eax - 2]
test cx, cx
jne 0x41efb3
add eax, 0xfffffffe
mov dword [edx + 0x14], eax
mov edi, dword [ebp - 0x114]
mov eax, dword [edi + 0x10]
mov esi, dword [edi + 0x14]
sub eax, esi
cmp eax, 8
jl 0x41efde
mov eax, dword [edi + 0xc]
mov dword [esi + eax], 0x7c0020
mov dword [esi + eax + 4], 0x20
add dword [edi + 0x14], 8
jmp 0x41eff8
lea eax, [esi + 8]
mov ecx, edi
push eax
call fcn.0041f0e0
mov dword [eax + esi], 0x7c0020
mov dword [eax + esi + 4], 0x20
mov eax, dword [ebp - 0xf8]
test eax, eax
jne 0x41f015
cmp dword [ebp - 0xe0], 0
mov eax, 0x42d644
cmovne eax, dword [ebp - 0xe8]
mov esi, dword [ebp - 0xd4]
mov ecx, esi
push eax
call fcn.00422040
mov dword [ebp - 4], 4
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0xf4], vtable.CVolMem.0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xe8]
test ecx, ecx
je 0x41f073
mov eax, dword [ebp - 0xf4]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41f06b
mov ecx, 0x438d88
call fcn.0041fed0
jmp 0x41f073
lea ecx, [ebp - 0xf4]
call eax
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xe4], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0xf4], vtable.CVolObject.0
mov dword [ebp - 4], 0xffffffff
mov ebx, dword [ebp - 0xd8]
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
cmp ebx, dword [ebp - 0x108]
jb 0x41eaa8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00426886
mov esp, ebp
pop ebp
ret 8