Function at 0x401000
Capabilities:
Terminate process

Disassembly:
push ecx
push ebx
push ebp
push esi
push edi
xor ebx, ebx
push 0x401bd0
push 0xb
mov dword [0x412590], ebx
mov byte [0x4131ea], bl
mov byte [0x41258d], bl
mov byte [0x41361c], bl
mov byte [0x4131eb], 1
mov dword [0x413610], ebx
mov dword [0x413620], 9
mov byte [0x41258c], bl
mov byte [0x412594], bl
mov dword [0x41257c], ebx
mov dword [0x413624], ebx
mov dword [0x413614], 0x1e
mov byte [0x412580], bl
mov dword [0x412584], ebx
call dword [sym.imp.MSVCRT.dll_signal]
push 0x40f05c
push 0x413200
call fcn.00401ca0
push 0x40f064
push 0x4129c0
call fcn.00401ca0
mov esi, dword [esp + 0x34]
mov eax, dword [esi]
push eax
push 0x4125a0
call fcn.00401ca0
mov cl, byte [0x4125a0]
add esp, 0x20
test cl, cl
mov dword [0x41360c], 0x4125a0
mov eax, 0x4125a0
je 0x4010d2
cmp cl, 0x5c
jne 0x4010ca
lea ecx, [eax + 1]
mov dword [0x41360c], ecx
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4010bc
lea edx, [esp + 0x10]
push str.BZIP2
push edx
mov dword [esp + 0x18], ebx
call fcn.00403da0
lea eax, [esp + 0x18]
push str.BZIP
push eax
call fcn.00403da0
mov ecx, dword [esp + 0x28]
add esp, 0x10
lea eax, [ecx - 1]
cmp eax, 1
jl 0x401124
mov edi, eax
mov eax, dword [esp + 0x10]
add esi, 4
mov edx, dword [esi]
push edx
push eax
call fcn.00403cd0
add esp, 8
add esi, 4
dec edi
mov dword [esp + 0x10], eax
jne 0x40110c
jmp 0x401128
mov eax, dword [esp + 0x10]
mov ebp, 7
cmp eax, ebx
mov dword [0x4129ac], ebp
mov dword [0x41257c], ebx
mov byte [esp + 0x1c], 1
mov edx, eax
je 0x4011aa
mov eax, dword [edx]
mov edi, 0x40f07c
mov esi, eax
mov ecx, 3
xor ebx, ebx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40115e
mov byte [esp + 0x1c], bl
jmp 0x40119a
cmp byte [eax], 0x2d
jne 0x40116b
mov al, byte [esp + 0x1c]
test al, al
jne 0x40119a
mov eax, dword [0x41257c]
or ecx, 0xffffffff
inc eax
mov dword [0x41257c], eax
mov esi, dword [edx]
mov edi, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ebp, ecx
jge 0x40119a
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebp, ecx
mov dword [0x4129ac], ebp
mov edx, dword [edx + 4]
test edx, edx
jne 0x401144
mov eax, dword [0x41257c]
test eax, eax
jne 0x4011b6
mov dword [0x412588], 1
jmp 0x4011c0
mov dword [0x412588], 3
mov eax, dword [0x41360c]
mov esi, dword [sym.imp.MSVCRT.dll_strstr]
push str.unzip
push eax
mov dword [0x413618], 1
call esi
add esp, 8
mov edi, 2
test eax, eax
jne 0x4011fe
mov ecx, dword [0x41360c]
push str.UNZIP
push ecx
call esi
add esp, 8
test eax, eax
je 0x401204
mov dword [0x413618], edi
mov edx, dword [0x41360c]
push str.z2cat
push edx
call esi
add esp, 8
test eax, eax
jne 0x401257
mov eax, dword [0x41360c]
push str.Z2CAT
push eax
call esi
add esp, 8
test eax, eax
jne 0x401257
mov ecx, dword [0x41360c]
push str.zcat
push ecx
call esi
add esp, 8
test eax, eax
jne 0x401257
mov edx, dword [0x41360c]
push str.ZCAT
push edx
call esi
add esp, 8
test eax, eax
je 0x401270
mov edx, dword [0x41257c]
xor eax, eax
test edx, edx
setne al
inc eax
mov dword [0x413618], edi
mov dword [0x412588], eax
mov edx, dword [esp + 0x10]
test edx, edx
mov ebx, edx
je 0x40141f
mov ebp, 3
mov eax, dword [ebx]
mov ecx, ebp
mov edi, 0x40f0b0
mov esi, eax
xor ebp, ebp
repe cmpsb byte [esi], byte es:[edi]
je 0x40141f
cmp byte [eax], 0x2d
jne 0x4013cc
mov cl, byte [eax + 1]
cmp cl, 0x2d
je 0x4013cc
test cl, cl
mov esi, 1
je 0x4013cc
mov ebp, 3
mov edi, 2
movsx eax, byte [eax + esi]
add eax, 0xffffffcf
cmp eax, 0x49
ja case.0x4012dc.69
xor ecx, ecx
mov cl, byte [eax + 0x4019b4]
jmp dword [ecx*4 + 0x401960]
mov dword [0x412588], edi
jmp 0x4013ae
mov dword [0x413618], edi
jmp 0x4013ae
mov dword [0x413618], 1
jmp 0x4013ae
mov byte [0x41361c], 1
jmp 0x4013ae
mov dword [0x413618], ebp
jmp 0x4013ae
mov byte [0x41258d], 1
jmp 0x4013ae
mov byte [0x4131ea], 1
jmp 0x4013ae
mov byte [0x4131eb], 0
jmp 0x4013ae
mov dword [0x413620], 1
jmp 0x4013ae
mov dword [0x413620], edi
jmp 0x4013ae
mov dword [0x413620], ebp
jmp 0x4013ae
mov dword [0x413620], 4
jmp 0x4013ae
mov dword [0x413620], 5
jmp 0x4013ae
mov dword [0x413620], 6
jmp 0x4013ae
mov dword [0x413620], 7
jmp 0x4013ae
mov dword [0x413620], 8
jmp 0x4013ae
mov dword [0x413620], 9
jmp 0x4013ae
call fcn.00403c50
jmp 0x4013ae
inc dword [0x413610]
mov eax, dword [ebx]
inc esi
cmp byte [eax + esi], 0
jne 0x4012c4
mov edx, dword [esp + 0x10]
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x401283
jmp 0x40141f
mov ebp, 3
jmp 0x4013bf
mov edx, dword [0x41360c]
push edx
call fcn.00403c70
add esp, 4
push 0
call dword [sym.imp.MSVCRT.dll_exit]
mov eax, dword [ebx]
mov ecx, dword [0x41360c]
mov edx, dword [sym.imp.MSVCRT.dll__iob]
push eax
push ecx
add edx, 0x40
push 0x40f0b4
push edx
call dword [sym.imp.MSVCRT.dll_fprintf]
mov eax, dword [0x41360c]
push eax
call fcn.00403c70
add esp, 0x14
push 1
call dword [sym.imp.MSVCRT.dll_exit]
test edx, edx
mov ebx, edx
je 0x40165c
mov ebp, dword [sym.imp.MSVCRT.dll_strncmp]
mov eax, dword [ebx]
mov edi, 0x40f0c8
mov esi, eax
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x40165c
mov edi, str.__stdout
mov esi, eax
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x401468
mov dword [0x412588], 2
jmp 0x401651
mov edi, str.__decompress
mov esi, eax
mov ecx, 0xd
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x401489
mov dword [0x413618], 2
jmp 0x401651
mov edi, str.__compress
mov esi, eax
mov ecx, 0xb
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4014aa
mov dword [0x413618], 1
jmp 0x401651
mov edi, str.__force
mov esi, eax
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4014c8
mov byte [0x41361c], 1
jmp 0x401651
mov edi, str.__test
mov esi, eax
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4014e9
mov dword [0x413618], 3
jmp 0x401651
mov edi, str.__keep
mov esi, eax
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x401507
mov byte [0x41258d], 1
jmp 0x401651
mov edi, str.__small
mov esi, eax
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x401525
mov byte [0x4131ea], 1
jmp 0x401651
mov edi, str.__quiet
mov esi, eax
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x401542
mov byte [0x4131eb], dl
jmp 0x401651
mov edi, str.__version
mov esi, eax
mov ecx, 0xa
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40155e
call fcn.00403c50
jmp 0x401651
mov edi, str.__license
mov esi, eax
mov ecx, 0xa
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40157a
call fcn.00403c50
jmp 0x401651
mov edi, str.__exponential
mov esi, eax
mov ecx, 0xe
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40159b
mov dword [0x413614], 1
jmp 0x401651
mov edi, str.__repetitive_best
mov esi, eax
mov ecx, 0x12
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4015bb
push eax
call fcn.00403ca0
add esp, 4
jmp 0x401651
mov edi, str.__repetitive_fast
mov esi, eax
mov ecx, 0x12
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4015d8
push eax
call fcn.00403ca0
add esp, 4
jmp 0x401651
mov edi, str.__fast
mov esi, eax
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4015f6
mov dword [0x413620], 1
jmp 0x401651
mov edi, str.__best
mov esi, eax
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x401614
mov dword [0x413620], 9
jmp 0x401651
mov edi, str.__verbose
mov esi, eax
mov ecx, 0xa
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40162e
inc dword [0x413610]
jmp 0x401651
mov edi, str.__help
mov esi, eax
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x4016a6
push 2
push 0x40f190
push eax
call ebp
add esp, 0xc
test eax, eax
je 0x4016bc
mov ebx, dword [ebx + 4]
test ebx, ebx
jne 0x40142f
mov ecx, dword [0x413610]
mov eax, 4
cmp ecx, eax
jle 0x401670
mov dword [0x413610], eax
mov ecx, dword [0x413618]
mov edi, 1
cmp ecx, edi
jne 0x4016f1
mov al, byte [0x4131ea]
test al, al
je 0x401725
mov edx, dword [0x413620]
mov eax, 2
cmp edx, eax
jle 0x401725
mov dword [0x413620], eax
jmp 0x401725
mov eax, dword [0x41360c]
push eax
call fcn.00403c70
add esp, 4
push 0
call dword [sym.imp.MSVCRT.dll_exit]
mov ecx, dword [ebx]
mov edx, dword [0x41360c]
mov eax, dword [sym.imp.MSVCRT.dll__iob]
push ecx
push edx
add eax, 0x40
push str._s:_Bad_flag___s_n
push eax
call dword [sym.imp.MSVCRT.dll_fprintf]
mov ecx, dword [0x41360c]
push ecx
call fcn.00403c70
add esp, 0x14
push 1
call dword [sym.imp.MSVCRT.dll_exit]
cmp ecx, 3
jne 0x401725
mov eax, dword [0x412588]
cmp eax, 2
jne 0x401744
mov edx, dword [0x41360c]
mov eax, dword [sym.imp.MSVCRT.dll__iob]
push edx
add eax, 0x40
push str._s:__c_and__t_cannot_be_used_together._n
push eax
call dword [sym.imp.MSVCRT.dll_fprintf]
add esp, 0xc
push edi
call dword [sym.imp.MSVCRT.dll_exit]
mov eax, dword [0x412588]
cmp eax, 2
jne 0x401740
mov edx, dword [0x41257c]
test edx, edx
jne 0x401740
mov eax, edi
mov dword [0x412588], eax
cmp ecx, edi
je 0x40174e
mov dword [0x413620], 0
cmp eax, 3
jne 0x40176e
mov esi, dword [sym.imp.MSVCRT.dll_signal]
push 0x401a20
push 2
call esi
push 0x401a20
push 0xf
call esi
add esp, 0x10
mov eax, dword [0x413618]
cmp eax, edi
jne 0x401812
cmp dword [0x412588], edi
jne 0x4017c1
push 0
call fcn.00401d10
add esp, 4
mov esi, dword [esp + 0x10]
test esi, esi
je 0x4017b6
mov ebp, dword [sym.imp.MSVCRT.dll_free]
mov eax, dword [esi]
mov edi, dword [esi + 4]
test eax, eax
je 0x4017aa
push eax
call ebp
add esp, 4
push esi
call ebp
add esp, 4
mov esi, edi
test edi, edi
jne 0x40179b
mov eax, dword [0x412584]
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
mov ebp, dword [esp + 0x10]
mov bl, 1
test ebp, ebp
je 0x40178d
mov eax, dword [ebp]
mov edi, 0x40f1d0
mov esi, eax
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4017e4
xor bl, bl
jmp 0x401806
cmp byte [eax], 0x2d
jne 0x4017ed
test bl, bl
jne 0x401806
mov edx, dword [0x413624]
inc edx
mov dword [0x413624], edx
mov eax, dword [ebp]
push eax
call fcn.00401d10
add esp, 4
mov ebp, dword [ebp + 4]
test ebp, ebp
jne 0x4017cb
jmp 0x40178d
cmp eax, 2
jne 0x4018ab
mov eax, dword [0x412588]
mov byte [0x412594], 0
cmp eax, edi
jne 0x401837
push 0
call fcn.00402b10
add esp, 4
jmp 0x401887
mov ebp, dword [esp + 0x10]
mov bl, 1
test ebp, ebp
je 0x40178d
mov eax, dword [ebp]
mov edi, 0x40f1d4
mov esi, eax
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40185e
xor bl, bl
jmp 0x401880
cmp byte [eax], 0x2d
jne 0x401867
test bl, bl
jne 0x401880
mov edx, dword [0x413624]
inc edx
mov dword [0x413624], edx
mov eax, dword [ebp]
push eax
call fcn.00402b10
add esp, 4
mov ebp, dword [ebp + 4]
test ebp, ebp
jne 0x401845
mov al, byte [0x412594]
test al, al
je 0x40178d
push 2
call fcn.00401a00
mov ecx, dword [0x412584]
add esp, 4
push ecx
call dword [sym.imp.MSVCRT.dll_exit]
mov eax, dword [0x412588]
mov byte [0x41258c], 0
cmp eax, edi
jne 0x4018c7
push 0
call fcn.00403670
add esp, 4
jmp 0x401917
mov ebp, dword [esp + 0x10]
mov bl, 1
test ebp, ebp
je 0x40178d
mov eax, dword [ebp]
mov edi, 0x40f1d8
mov esi, eax
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4018ee
xor bl, bl
jmp 0x401910
cmp byte [eax], 0x2d
jne 0x4018f7
test bl, bl
jne 0x401910
mov edx, dword [0x413624]
inc edx
mov dword [0x413624], edx
mov eax, dword [ebp]
push eax
call fcn.00403670
add esp, 4
mov ebp, dword [ebp + 4]
test ebp, ebp
jne 0x4018d5
mov al, byte [0x41258c]
test al, al
je 0x40178d
mov al, byte [0x4131eb]
test al, al
je 0x40178d
mov ecx, dword [sym.imp.MSVCRT.dll__iob]
push str._nYou_can_use_the__bzip2recover_program_to_attempt_to_recover_ndata_from_undamaged_sections_of_corrupted_files._n_n
add ecx, 0x40
push ecx
call dword [sym.imp.MSVCRT.dll_fprintf]
push 2
call fcn.00401a00
mov edx, dword [0x412584]
add esp, 0xc
push edx
call dword [sym.imp.MSVCRT.dll_exit]
lea ecx, [ecx]
cmp eax, 0x49004013
adc eax, dword [eax]
push ecx
adc eax, dword [eax]
pop ecx
adc eax, dword [eax]
adc eax, dword gs:[eax]
jno 4200841
inc eax
add byte [ebp + 0x13], bh
inc eax
add byte [ecx - 0x6affbfed], cl
adc eax, dword [eax]
mov eax, dword [0xe3004013]
adc al, byte [eax]
out dx, al
adc al, byte [eax]
or byte [ebx], dl
inc eax
add bl, dl
adc eax, dword [eax]
pop ds
adc eax, dword [eax]
xor al, 0x13
inc eax
add byte [ebx], ch
adc eax, dword [eax]
adc al, 0x13
inc eax
add byte [eax - 0x6ffbfed], ch
adc al, byte [eax]
ljmp 0x201