Function at 0x42cdc0
Capabilities:
Get file attributes
Query environment variable

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x661307
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x868
mov eax, dword [0x70e00c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x850], eax
mov ecx, dword [ebx + 8]
xor edi, edi
mov dword [ebp - 0x85c], ecx
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x844], edi
mov dword [ebp - 0x840], esi
mov dword [ebp - 0x834], ecx
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 4], ecx
test eax, eax
jne 0x42ce3c
jmp 0x42d39c
mov edi, eax
lea edx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x42ce41
sub edi, edx
mov dword [ebp - 0x838], 0
mov edx, dword [ebp - 0x850]
mov eax, edx
mov dword [ebp - 0x858], edi
mov edi, dword [ebp - 0x844]
mov dword [ebp - 0x84c], 0
cmp byte [edx], 0
mov dword [ebp - 0x828], eax
je 0x42d213
xor edx, edx
mov ecx, eax
inc ecx
mov dword [ebp - 0x82c], edx
mov dword [ebp - 0x854], ecx
nop dword [eax]
nop word [eax + eax]
cmp byte [eax], 0x22
mov ecx, dword [ebp - 0x834]
jne 0x42cf9f
cmp dword [ebp - 0x838], 0
mov byte [eax], 0
je 0x42ceca
mov dword [ebp - 0x838], 0
jmp 0x42cf9f
mov eax, dword [ebp - 0x854]
add eax, edx
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x84c], eax
lea eax, [edx + 1]
mov dword [ebp - 0x824], eax
lea eax, [ebp - 0x824]
cmp eax, esi
jae 0x42cf50
cmp edi, eax
ja 0x42cf50
sub eax, edi
sar eax, 2
mov dword [ebp - 0x830], eax
cmp esi, ecx
jne 0x42cf2e
push ecx
lea ecx, [ebp - 0x844]
call fcn.0042d5c0
mov eax, dword [ebp - 0x83c]
mov esi, dword [ebp - 0x840]
mov edi, dword [ebp - 0x844]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x830]
lea eax, [edi + eax*4]
push esi
push 4
mov dword [ebp - 0x830], eax
call fcn.00404280
add esp, 8
test eax, eax
je 0x42cf90
mov ecx, dword [ebp - 0x830]
mov ecx, dword [ecx]
jmp 0x42cf8e
cmp esi, ecx
jne 0x42cf78
push ecx
lea ecx, [ebp - 0x844]
call fcn.0042d5c0
mov eax, dword [ebp - 0x83c]
mov esi, dword [ebp - 0x840]
mov edi, dword [ebp - 0x844]
mov dword [ebp - 0x834], eax
push esi
push 4
call fcn.00404280
add esp, 8
test eax, eax
je 0x42cf90
mov ecx, dword [ebp - 0x82c]
inc ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x828]
add esi, 4
mov dword [ebp - 0x840], esi
movsx eax, byte [eax]
push eax
push 0x6eab30
call fcn.005fa980
add esp, 8
test eax, eax
je 0x42d110
cmp dword [ebp - 0x838], 0
jne 0x42d110
mov ecx, dword [ebp - 0x84c]
test ecx, ecx
je 0x42d0f8
cmp dword [ebx + 0xc], 0
je 0x42d0f8
mov eax, esi
sub eax, edi
sar eax, 2
cmp eax, 1
ja 0x42d0f8
mov eax, dword [ebp - 0x828]
push 0x2525
push ecx
mov dword [ebp - 0x824], ecx
mov dl, byte [eax]
mov byte [ebp - 0x845], dl
mov byte [eax], 0
call fcn.005fa980
add esp, 8
test eax, eax
je 0x42d047
push 0x400
lea eax, [ebp - 0x820]
push eax
push dword [ebp - 0x84c]
call dword [sym.imp.KERNEL32.DLL_ExpandEnvironmentStringsA]
test eax, eax
lea ecx, [ebp - 0x820]
cmove ecx, dword [ebp - 0x824]
mov eax, ecx
mov dword [ebp - 0x824], eax
jmp 0x42d04d
mov eax, dword [ebp - 0x824]
push 0x400
lea ecx, [ebp - 0x420]
push ecx
push eax
call fcn.00404010
add esp, 0xc
test eax, eax
jns 0x42d0c5
push 0x2e
push dword [ebp - 0x824]
call fcn.005fad20
add esp, 8
test eax, eax
je 0x42d08c
push 0x6ea750
push eax
call fcn.00628761
add esp, 8
test eax, eax
je 0x42d0c5
push dword [ebp - 0x824]
lea eax, [ebp - 0x420]
push 0x6eab34
push 0x400
push eax
call fcn.0042cd60
lea eax, [ebp - 0x420]
mov byte [ebp - 0x21], 0
push 0x400
push eax
push eax
call fcn.00404010
add esp, 0x1c
test eax, eax
js 0x42d0d6
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
test al, 0x10
je 0x42d0e9
mov eax, dword [ebp - 0x828]
mov cl, byte [ebp - 0x845]
mov byte [eax], cl
jmp 0x42d1f6
mov dword [ebp - 0x84c], 0
jmp 0x42d1f0
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x84c], 0
mov byte [eax], 0
jmp 0x42d1f6
cmp dword [ebp - 0x84c], 0
jne 0x42d1f0
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x824], eax
lea eax, [ebp - 0x824]
cmp eax, esi
jae 0x42d1a4
cmp edi, eax
ja 0x42d1a4
sub eax, edi
sar eax, 2
mov dword [ebp - 0x830], eax
cmp esi, dword [ebp - 0x834]
jne 0x42d180
push ecx
lea ecx, [ebp - 0x844]
call fcn.0042d5c0
mov eax, dword [ebp - 0x83c]
mov esi, dword [ebp - 0x840]
mov edi, dword [ebp - 0x844]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x830]
lea eax, [edi + eax*4]
push esi
push 4
mov dword [ebp - 0x830], eax
call fcn.00404280
add esp, 8
test eax, eax
je 0x42d1e7
mov ecx, dword [ebp - 0x830]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x42d1e7
cmp esi, dword [ebp - 0x834]
jne 0x42d1d0
push ecx
lea ecx, [ebp - 0x844]
call fcn.0042d5c0
mov eax, dword [ebp - 0x83c]
mov esi, dword [ebp - 0x840]
mov edi, dword [ebp - 0x844]
mov dword [ebp - 0x834], eax
push esi
push 4
call fcn.00404280
add esp, 8
test eax, eax
je 0x42d1e7
mov edx, dword [ebp - 0x82c]
mov dword [eax], edx
add esi, 4
mov dword [ebp - 0x840], esi
mov eax, dword [ebp - 0x828]
mov edx, dword [ebp - 0x82c]
inc eax
inc edx
mov dword [ebp - 0x828], eax
mov dword [ebp - 0x82c], edx
cmp byte [eax], 0
jne 0x42cea0
sub esi, edi
sar esi, 2
mov dword [ebp - 0x824], esi
test esi, esi
je 0x42d36a
cmp dword [ebp - 0x85c], 0
je 0x42d36a
mov eax, dword [ebp - 0x858]
lea eax, [eax + esi*4]
inc eax
push eax
call fcn.0060a1f7
add esp, 4
mov dword [ebp - 0x82c], eax
test eax, eax
je 0x42d36a
mov ecx, dword [ebp - 0x858]
lea eax, [eax + esi*4]
inc ecx
movd xmm0, eax
push ecx
push dword [ebp - 0x850]
pshufd xmm0, xmm0, 0
push eax
mov dword [ebp - 0x854], eax
movaps xmmword [ebp - 0x870], xmm0
call fcn.005f40c0
add esp, 0xc
xor edx, edx
test esi, esi
jle 0x42d35c
mov ecx, dword [ebp - 0x82c]
cmp esi, 8
jb 0x42d31d
lea eax, [esi - 1]
lea eax, [edi + eax*4]
cmp ecx, eax
ja 0x42d2b1
lea eax, [ecx - 4]
lea eax, [eax + esi*4]
cmp eax, edi
jae 0x42d31d
mov eax, esi
and eax, reloc.WS2_32.dll_getsockopt
jns 0x42d2bf
dec eax
or eax, 0xfffffff8
inc eax
movaps xmm1, xmmword [ebp - 0x870]
mov dword [ebp - 0x838], esi
mov esi, edi
sub dword [ebp - 0x838], eax
sub esi, ecx
mov dword [ebp - 0x830], esi
lea eax, [ecx + 0x10]
mov esi, dword [ebp - 0x824]
mov ecx, dword [ebp - 0x830]
nop dword [eax + eax]
movups xmm0, xmmword [edi + edx*4]
add edx, 8
lea eax, [eax + 0x20]
paddd xmm0, xmm1
movups xmmword [eax - 0x30], xmm0
movups xmm0, xmmword [ecx + eax - 0x20]
paddd xmm0, xmm1
movups xmmword [eax - 0x20], xmm0
cmp edx, dword [ebp - 0x838]
jl 0x42d2f0
mov ecx, dword [ebp - 0x82c]
cmp edx, esi
jge 0x42d35c
mov eax, edi
lea ecx, [ecx + edx*4]
sub eax, dword [ebp - 0x82c]
mov edi, esi
sub edi, edx
mov dword [ebp - 0x830], eax
mov edx, dword [ebp - 0x854]
mov esi, eax
nop
mov eax, dword [ecx + esi]
lea ecx, [ecx + 4]
add eax, edx
mov dword [ecx - 4], eax
sub edi, 1
jne 0x42d340
mov esi, dword [ebp - 0x824]
mov edi, dword [ebp - 0x844]
mov ecx, dword [ebp - 0x85c]
mov eax, dword [ebp - 0x82c]
mov dword [ecx], eax
push dword [ebp - 0x850]
call fcn.005fa0fb
add esp, 4
mov dword [ebp - 4], 2
test edi, edi
je 0x42d39a
mov eax, dword [ebp - 0x834]
sub eax, edi
push 4
sar eax, 2
push eax
push edi
call fcn.00404490
add esp, 0xc
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004aa758
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret