Function at 0x41399c
Capabilities:
Timestomp file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff80
mov eax, 0x4aead8
push ebx
push esi
push edi
call fcn.00499b88
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x444]
xor edx, edx
call fcn.00485058
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x448]
call fcn.004850b4
mov dword [ebp - 0x50], eax
mov word [ebp - 0x38], 8
mov word [ebp - 0x38], 0x14
mov edx, dword [ebp - 0x4c]
inc edx
je 0x413bea
mov ecx, dword [ebp - 0x50]
inc ecx
je 0x413bea
mov ecx, 2
xor edx, edx
mov eax, dword [ebp - 0x4c]
call fcn.00485138
mov word [ebp - 0x38], 0x14
mov esi, eax
and esi, 0x800003ff
jns 0x413a1a
dec esi
or esi, 0xfffffc00
inc esi
test eax, eax
jns 0x413a23
add eax, 0x3ff
sar eax, 0xa
test esi, esi
setne dl
and edx, 1
add eax, edx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x450]
xor ecx, ecx
mov eax, dword [ebp - 0x4c]
call fcn.00485138
mov byte [ebp - 0x55], 0
xor ebx, ebx
jmp 0x413b08
mov edx, dword [ebp + 8]
add edx, 0x39
mov ecx, 0x400
mov eax, dword [ebp - 0x4c]
call fcn.004850e0
mov edx, eax
mov word [ebp - 0x38], 0x14
xor eax, eax
cmp edx, 0x400
mov ecx, 0x64
je 0x413ac4
cmp ecx, eax
jle 0x413ab7
mov eax, dword [ebp - 0x4c]
call fcn.0048517c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x444]
xor edx, edx
call fcn.00485058
mov dword [ebp - 0x4c], eax
mov eax, ebx
mov ecx, dword [ebp + 8]
shl eax, 0xa
mov edx, dword [ecx + 0x450]
add edx, eax
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
call fcn.00485138
dec ebx
jmp 0x413b07
mov edx, dword [ebp + 8]
mov byte [edx + 0x38], 0
mov byte [ebp - 0x55], 1
jmp 0x413b14
mov edx, dword [ebp + 8]
add edx, 0x39
mov ecx, 0x400
mov eax, dword [ebp - 0x50]
call fcn.0048510c
mov eax, ebx
mov edx, dword [ebp + 8]
shl eax, 0xa
add eax, 0x400
mov dword [edx + 0x458], eax
lea eax, [ebp - 0x60]
mov dword [ebp - 0x60], 0x413d34
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x5c], ecx
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp + 8]
call fcn.0047f9a4
inc ebx
mov edx, dword [ebp - 0x54]
dec edx
cmp ebx, edx
jl 0x413a51
mov cl, byte [ebp - 0x55]
test cl, cl
jne 0x413bea
mov eax, dword [ebp - 0x54]
test eax, eax
jle 0x413b5d
test esi, esi
jne 0x413b5d
mov esi, 0x400
jmp 0x413b5d
mov eax, dword [ebp - 0x4c]
call fcn.0048517c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x444]
xor edx, edx
call fcn.00485058
mov dword [ebp - 0x4c], eax
mov edx, esi
neg edx
mov ecx, 1
mov eax, dword [ebp - 0x4c]
call fcn.00485138
mov edx, dword [ebp + 8]
add edx, 0x39
mov ecx, esi
mov eax, dword [ebp - 0x4c]
call fcn.004850e0
cmp esi, eax
jne 0x413b31
mov edx, dword [ebp + 8]
add edx, 0x39
mov ecx, esi
mov eax, dword [ebp - 0x50]
call fcn.0048510c
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp + 8]
shl eax, 0xa
add esi, eax
lea eax, [ebp - 0x68]
add esi, 0xfffffc00
mov dword [edx + 0x458], esi
mov dword [ebp - 0x68], 0x413d34
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x64], ecx
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp + 8]
call fcn.0047f9a4
mov edx, dword [ebp + 8]
mov byte [edx + 0x38], 1
lea ecx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0x70]
push edx
mov ecx, dword [ebp - 0x4c]
push ecx
call sub.KERNEL32.DLL_GetFileTime
test eax, eax
je 0x413bea
lea eax, [ebp - 0x80]
push eax
lea edx, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x70]
push ecx
mov eax, dword [ebp - 0x50]
push eax
call sub.KERNEL32.DLL_SetFileTime
mov word [ebp - 0x38], 8
jmp 0x413ce9
mov word [ebp - 0x38], 0
mov ecx, dword [ebp - 0x4c]
inc ecx
je 0x413cfd
mov eax, dword [ebp - 0x4c]
call fcn.0048517c
mov edx, dword [ebp - 0x50]
inc edx
je 0x413d0b
mov eax, dword [ebp - 0x50]
call fcn.0048517c
cmp word [ebp - 0x36], 0
je 0x413d13
ret
mov edx, dword [ebp - 0x48]
mov dword fs:[0], edx
mov esp, ebp
mov edi, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x88]
mov ebx, dword [ebp - 0x84]
pop ebp
ret