Function at 0x42a120
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
and dword [ebp - 4], 0
mov eax, 0x44b534
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 8], eax
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x42a143
mov eax, dword [ecx]
jmp 0x42a14c
mov edx, dword [esi + 8]
test edx, edx
je 0x42a14c
mov eax, dword [edx]
mov edx, dword [esi + 0xc]
mov dword [ebp + 8], eax
test edx, edx
je 0x42a15b
mov eax, dword [edx]
mov dword [ebp - 8], eax
lea ebx, [ecx + 0x2c]
test ecx, ecx
jne 0x42a19b
mov eax, dword [edx + 0x10]
lea ebx, [edx + 0x40]
mov dword [ebp - 0x10], eax
mov eax, dword [edx + 0x14]
and dword [ebp - 0x18], 0
lea edi, [ebp - 0x24]
and dword [ebp - 0x14], 0
mov dword [ebp - 0xc], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x30]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
test ecx, ecx
je 0x42a1a6
xor eax, eax
test edx, edx
setne al
add eax, 0x20000150
jmp 0x42a1b5
mov eax, dword [ecx + 0x18]
mov dword [ebp - 0x10], eax
mov eax, dword [ecx + 0x1c]
jmp 0x42a16e
mov eax, dword [esi + 8]
neg eax
sbb eax, eax
and eax, 3
add eax, 0x2000014f
push dword [ebx]
push str.download
push dword [ebp - 8]
push dword [ebp + 8]
push eax
push 2
call fcn.0040558c
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 4]
add esp, 0x18
push eax
push edi
call fcn.004445ed
test eax, eax
je 0x42a239
mov eax, dword [ebp - 4]
test al, 1
je 0x42a239
and eax, 0xfffffffe
push eax
push edi
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x42a239
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x42a20e
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x42a215
mov esi, 0x80004005
push esi
push 0x568
push str.apply.cpp
call fcn.00403858
push edi
push str.Failed_to_clear_readonly_bit_on_payload_destination_path:__ls
push esi
call fcn.0044041e
add esp, 0xc
jmp 0x42a2e2
and dword [ebp - 0x20], 0
mov dword [ebp - 0x24], fcn.00429a38
mov dword [ebp - 0x1c], esi
mov eax, dword [ebx]
push 0x62
pop ecx
cmp cx, word [eax]
jne 0x42a298
push 0x69
pop ecx
cmp cx, word [eax + 2]
jne 0x42a298
push 0x74
pop ecx
cmp cx, word [eax + 4]
jne 0x42a298
push 0x73
pop edx
cmp dx, word [eax + 6]
jne 0x42a298
movzx ecx, word [eax + 8]
mov dword [ebp + 0xc], 0x3a
cmp word [ebp + 0xc], cx
je 0x42a28b
cmp dx, cx
jne 0x42a298
mov ecx, dword [ebp + 0xc]
cmp cx, word [eax + 0xa]
jne 0x42a298
push edi
push ebx
lea eax, [ebp - 0x24]
push eax
call fcn.0042dd9c
jmp 0x42a2cb
mov eax, dword [esi]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x30]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x18], 0x429951
push eax
push edi
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push ebx
call fcn.0044664d
mov esi, eax
test esi, esi
jns 0x42a2e2
push edi
push dword [ebx]
push str.Failed_attempt_to_download_URL:__ls_to:__ls
push esi
call fcn.0044041e
add esp, 0x10
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8