Function at 0x422ca0
Capabilities:
Get file attributes
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4485a0
push 0x423b60
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 4], ebx
cmp dword [0x483d74], ebx
jne 0x422e36
xor edi, edi
mov dword [ebp - 0x2c], edi
cmp dword [0x483d6c], ebx
je 0x422cf5
push str.IsolationAware_function_called_after_IsolationAwareCleanup_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [0x483d74], ebx
jne 0x422dfc
cmp dword [0x483d6c], ebx
jne 0x422d16
call fcn.00407570
test eax, eax
je 0x422e04
mov ebx, dword [0x451140]
mov dword [ebp - 0x44], ebx
xor esi, esi
mov dword [ebp - 0x34], esi
mov eax, dword [0x48af10]
cmp eax, esi
jne 0x422deb
mov dword [ebp - 0x38], esi
cmp dword [0x48af14], esi
jne 0x422d6e
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, 0x80000000
je 0x422d64
push str.___.___
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push str.Unicows.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x48af18], eax
mov dword [0x48af14], 1
mov eax, dword [0x48af18]
test eax, eax
je 0x422d8c
push str.ActivateActCtx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp - 0x38], esi
test esi, esi
jne 0x422ddd
mov eax, dword [0x48af1c]
mov dword [ebp - 0x3c], eax
test eax, eax
jne 0x422dcc
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, 0x80000000
je 0x422db3
mov eax, dword [str.Kernel32.dll]
push eax
call dword [0x4429b8]
jmp 0x422dc0
mov ecx, dword [0x4429c4]
push ecx
call dword [0x4429bc]
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x422ddd
mov dword [0x48af1c], eax
push str.ActivateActCtx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], esi
mov eax, esi
mov dword [0x48af10], eax
test esi, esi
je 0x422df5
lea edx, [ebp - 0x24]
push edx
push ebx
call eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x48], eax
test eax, eax
je 0x422e04
mov edi, 1
mov dword [ebp - 0x2c], edi
xor ebx, ebx
cmp edi, ebx
jne 0x422e2b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x30], eax
cmp eax, 0x7f
je 0x422e1d
cmp eax, 0x78
jne 0x422e2b
mov edi, 1
mov dword [0x483d74], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x20], edi
cmp edi, ebx
je 0x422ee5
xor esi, esi
mov dword [ebp - 0x4c], esi
cmp dword [0x48af14], ebx
jne 0x422e75
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, 0x80000000
je 0x422e6b
push str.___.___
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push str.Unicows.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x48af18], eax
mov dword [0x48af14], 1
mov eax, dword [0x48af18]
cmp eax, ebx
je 0x422e92
mov ecx, dword [ebp + 8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp - 0x4c], esi
cmp esi, ebx
jne 0x422ee2
mov eax, dword [0x48af24]
mov dword [ebp - 0x50], eax
cmp eax, ebx
jne 0x422ed2
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, 0x80000000
je 0x422eba
mov edx, dword [str.Comdlg32.dll]
push edx
call dword [0x448590]
jmp 0x422ec6
mov eax, dword [0x44859c]
push eax
call dword [0x448594]
mov dword [ebp - 0x50], eax
cmp eax, ebx
je 0x422ee2
mov dword [0x48af24], eax
mov ecx, dword [ebp + 8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 4], 0xffffffff
call fcn.00422f07
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4