Function at 0x43db60
Capabilities:
Check if file exists
Get file attributes
Set current directory

Disassembly:
sub esp, 0x498
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x4ac]
xor eax, eax
mov dword [esp + 0x1c], 0x90020
mov ebp, ecx
mov word [esp + 0x20], ax
mov ebx, edi
test edi, edi
je 0x43dbc1
movzx eax, word [edi]
test ax, ax
je 0x43dbc1
mov esi, eax
lea ecx, [esp + 0x1c]
mov edx, 0x20
nop dword [eax + eax]
cmp si, dx
je 0x43dbfc
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x43dba0
movzx eax, word [ebx + 2]
add ebx, 2
mov esi, eax
test ax, ax
jne 0x43db92
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43dbc6
sub ecx, edx
sar ecx, 1
lea ebx, [edi + ecx*2]
xor edi, edi
mov esi, ebx
sub esi, dword [esp + 0x4ac]
sar esi, 1
cmp esi, 0x20
jb 0x43dc19
mov eax, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov edi, ebx
nop
movzx eax, word [edi]
cmp eax, 0x20
je 0x43dc0d
cmp eax, 9
jne 0x43dc12
add edi, 2
jmp 0x43dc00
test ax, ax
jne 0x43dbda
jmp 0x43dbd8
cmp word [ebx], 0
mov ebx, dword [esp + 0x4ac]
je 0x43dc42
push esi
lea eax, [esp + 0x6c]
push ebx
push eax
call fcn.004aa484
add esp, 0xc
xor eax, eax
mov word [esp + esi*2 + 0x68], ax
lea esi, [esp + 0x68]
jmp 0x43dc44
mov esi, ebx
push 0x4d6fb4
push esi
mov byte [esp + 0x1c], 0
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43e889
push 0x4d768c
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
sete byte [esp + 0x14]
test eax, eax
je 0x43e889
push 0x4d7708
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43ddd1
test edi, edi
jne 0x43dcc3
push edi
call dword [sym.imp.KERNEL32.DLL_SetDllDirectoryW]
test eax, eax
jne 0x43ddea
push 0x4ceea8
push 0x4d0d58
mov ecx, ebp
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
movzx eax, word [edi]
mov ecx, eax
cmp eax, 0x22
je 0x43dcd4
mov edx, ecx
cmp eax, 0x27
jne 0x43dcf8
lea esi, [edi + 2]
push 0
push esi
call fcn.0049ca21
movzx ecx, word [edi]
add esp, 8
mov edx, ecx
cmp word [eax - 2], cx
jne 0x43dcf8
xor ecx, ecx
mov edi, esi
mov word [eax - 2], cx
movzx edx, word [esi]
cmp dx, 0x2a
jne 0x43dd38
movzx eax, word [edi + 2]
mov edx, eax
mov esi, eax
and eax, 0xffdf
add edx, 0xffffff9f
movzx ecx, ax
cmp dx, 0x19
mov eax, esi
cmova ecx, eax
cmp cx, 0x49
jne 0x43dd38
movzx eax, word [edi + 4]
add edi, 4
mov bl, 1
cmp eax, 0x20
je 0x43dd33
cmp eax, 9
jne 0x43dd3a
add edi, 2
jmp 0x43dd3a
xor bl, bl
push edi
lea eax, [esp + 0x18]
mov ecx, ebp
push eax
call fcn.0044c250
test eax, eax
je 0x43ea14
mov edi, dword [esp + 0x14]
push edi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x43dd7c
test al, 0x10
je 0x43dd7c
push edi
call dword [sym.imp.KERNEL32.DLL_SetDllDirectoryW]
push edi
mov esi, eax
call fcn.0049ef92
add esp, 4
test esi, esi
jmp 0x43dc9f
push edi
mov esi, 3
call dword [sym.imp.KERNEL32.DLL_LoadLibraryW]
mov dword [esp + 0x10], eax
test eax, eax
je 0x43dda6
lea eax, [esp + 0x10]
push eax
push edi
push 1
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleExW]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x43ddb9
test bl, bl
jne 0x43ddb9
push edi
push 0x4d4ad0
mov ecx, ebp
call fcn.0040d660
mov esi, eax
push edi
call fcn.0049ef92
mov eax, esi
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d771c
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43ddfc
mov byte [0x4e8eec], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d7734
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43ded5
test edi, edi
je 0x43deb9
push 0x4d7754
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43deb9
push 0x4d7760
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43de5e
mov dword [0x4e4800], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d7770
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43de8c
mov dword [0x4e4800], 3
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d3e00
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e59c
mov dword [0x4e4800], eax
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov dword [0x4e4800], 2
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d7780
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43df6c
test edi, edi
je 0x43df53
cmp word [edi], ax
je 0x43df53
push 0x4d7940
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43df53
cmp word [edi], 0x31
jne 0x43df13
cmp word [edi + 2], 0
je 0x43df53
push 0x4d794c
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43df3a
cmp word [edi], 0x30
jne 0x43e55c
cmp word [edi + 2], 0
jne 0x43e55c
mov byte [0x4e8cdf], 0
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov byte [0x4e8cdf], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d2d18
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e11f
cmp dword [ebp + 0x58], eax
jne 0x43e101
mov esi, dword [0x4e47f8]
mov eax, dword [esi + 0x18]
cmp eax, dword [ebp + 0x1c]
jne 0x43e101
test edi, edi
jne 0x43dfb4
mov dword [esi + 0x58], edi
lea eax, [edi + 3]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov ecx, edi
call fcn.00413ce0
mov dword [esi + 0x58], eax
test eax, eax
jne 0x43ddea
mov ebx, dword [ebp + 0x1c]
test ebx, ebx
je 0x43dfd0
dec dword [ebp + 0x28]
mov ecx, ebp
call fcn.0044f3d0
mov ecx, dword [ebp + 0x1c]
call fcn.00414530
cmp eax, 1
je 0x43e00d
cmp eax, 0xa00e0001
jne 0x43ea14
push 0x4ceea8
push 0x4d27a0
mov ecx, ebp
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
cmp word [edi], 0
je 0x43e06b
mov esi, edi
lea ecx, [esi + 2]
nop dword [eax + eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x43e020
sub esi, ecx
sar esi, 1
lea eax, [esi + esi]
lea ecx, [eax + 2]
mov dword [esp + 0x10], eax
call fcn.0047e560
mov ecx, eax
mov dword [esp + 0x14], ecx
test ecx, ecx
je 0x43eaa5
test esi, esi
mov esi, dword [esp + 0x10]
je 0x43e063
push esi
push edi
push ecx
call fcn.0049cad0
mov ecx, dword [esp + 0x20]
add esp, 0xc
xor eax, eax
mov word [ecx + esi], ax
jmp 0x43e070
mov ecx, 0x4ceea8
mov eax, dword [0x4e47f8]
push 0
push 0
push 0
mov eax, dword [eax + 0x58]
push 0
push 3
mov dword [eax + 0xc], ecx
mov ecx, ebp
mov esi, dword [ebp + 0x1c]
call fcn.00440080
test eax, eax
je 0x43dfef
push 0
push 0
push 6
push edi
mov ecx, ebp
call fcn.0043ebb0
test eax, eax
je 0x43dfef
push 0
push 0
push 0
push 0
push 4
mov ecx, ebp
call fcn.00440080
test eax, eax
je 0x43dfef
mov ecx, dword [esi + 0x28]
mov edx, dword [0x4e47f8]
mov eax, dword [edx + 0x58]
mov dword [ecx + 0xc], eax
mov dword [ebp + 0x1c], ebx
mov dword [edx + 0x18], ebx
test ebx, ebx
je 0x43ddea
push dword [ebp + 0x28]
lea ecx, [ebp + 0x24]
push ebx
call fcn.0044df80
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4ceea8
push 0x4d50e4
mov ecx, ebp
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d7794
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e157
test edi, edi
je 0x43ddea
mov ecx, edi
call fcn.00481f90
mov dword [0x4e4d60], eax
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d77b0
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e2a4
test edi, edi
je 0x43ddea
mov edx, 0x4d435c
mov ecx, edi
call fcn.00481b60
mov ebx, eax
test ebx, ebx
je 0x43e21c
movzx eax, word [ebx]
test ax, ax
je 0x43ddea
mov esi, eax
nop dword [eax]
mov ecx, 0x4d77c8
mov edx, 9
nop word [eax + eax]
cmp si, dx
je 0x43e1e3
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x43e1b0
movzx eax, word [ebx + 2]
add ebx, 2
mov esi, eax
test ax, ax
jne 0x43e1a0
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x64
lea eax, [ebx + 2]
push eax
push 0x4e4c90
call fcn.004aa484
add esp, 0xc
xor eax, eax
xor edx, edx
mov word [0x4e4d58], ax
mov ecx, 0x4e4c90
call fcn.00483bf0
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 7
push 0x4d77d0
push edi
call fcn.0049f012
add esp, 0xc
test eax, eax
jne 0x43e247
mov byte [0x4e48b9], al
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4e8e7a
push 0x4e8da0
push 0x4e8da1
push 0x4e8da2
push 0x4e48ba
push 0x4e8da5
push 0x4e8da3
push 0x4e48bb
push 0x4e48bc
push 0x4e8da4
push 0x4e4d5c
push 0x4e8da8
mov edx, 0x4e8dac
mov ecx, edi
call fcn.00416870
add esp, 0x30
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d77e0
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e307
test edi, edi
je 0x43ddea
mov ecx, edi
call fcn.00481f90
cmp eax, 0xff
jle 0x43e2e8
mov eax, 0xff
mov byte [0x4e48bd], al
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov ecx, 1
cmp eax, ecx
cmovl eax, ecx
mov byte [0x4e48bd], al
lea eax, [ecx + 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d780c
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e39e
test edi, edi
je 0x43e385
cmp word [edi], ax
je 0x43e385
push 0x4d7940
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43e385
cmp word [edi], 0x31
jne 0x43e345
cmp word [edi + 2], 0
je 0x43e385
push 0x4d794c
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43e36c
cmp word [edi], 0x30
jne 0x43e55c
cmp word [edi + 2], 0
jne 0x43e55c
mov byte [0x4e8e7c], 0
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov byte [0x4e8e7c], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d7830
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e401
test edi, edi
je 0x43ddea
mov ecx, edi
call fcn.00481f90
cmp eax, 0xff
jle 0x43e3e2
mov eax, 0xff
mov dword [0x4e47f4], eax
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov ecx, 1
cmp eax, ecx
cmovl eax, ecx
mov dword [0x4e47f4], eax
lea eax, [ecx + 2]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d7848
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e498
test edi, edi
je 0x43e47f
cmp word [edi], ax
je 0x43e47f
push 0x4d7940
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43e47f
cmp word [edi], 0x31
jne 0x43e43f
cmp word [edi + 2], 0
je 0x43e47f
push 0x4d794c
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43e466
cmp word [edi], 0x30
jne 0x43e59c
cmp word [edi + 2], 0
jne 0x43e59c
mov byte [0x4e8e7b], 0
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov byte [0x4e8e7b], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d7868
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e4d0
test edi, edi
je 0x43ddea
mov ecx, edi
call fcn.00481f90
mov dword [0x4e4808], eax
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d788c
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e4fb
mov byte [0x4e8eee], 1
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d78b0
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e576
test edi, edi
je 0x43e53d
movzx eax, word [edi]
cmp eax, 0x22
je 0x43e51e
cmp eax, 0x27
jne 0x43e53d
lea esi, [edi + 2]
push 0
push esi
call fcn.0049ca21
add esp, 8
mov cx, word [eax - 2]
cmp cx, word [edi]
jne 0x43e53d
xor ecx, ecx
mov edi, esi
mov word [eax - 2], cx
mov ecx, edi
call fcn.0040c190
cmp eax, 0xffffffff
mov dword [ebp + 0x6d8], eax
setne cl
mov byte [ebp + 0x6d7], cl
jne 0x43ddea
push edi
push 0x4d4b44
mov ecx, ebp
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d78cc
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e5cf
test edi, edi
je 0x43e5b6
mov ecx, edi
call fcn.00481f90
test eax, eax
js 0x43e59c
cmp eax, 0x64
jle 0x43e5b8
push ebx
push 0x4d4b44
mov ecx, ebp
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
xor eax, eax
mov byte [0x4e8e79], al
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d78e4
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43e729
test edi, edi
mov eax, 0x4ceea8
push 0x2c
cmovne eax, edi
mov edi, eax
mov dword [esp + 0x18], eax
push edi
call fcn.0049ca21
mov ecx, eax
add esp, 8
mov ebx, 0x4ceea8
test ecx, ecx
je 0x43e64a
lea ebx, [ecx + 2]
nop
movzx eax, word [ebx]
cmp eax, 0x20
je 0x43e61d
cmp eax, 9
jne 0x43e622
add ebx, 2
jmp 0x43e610
lea eax, [ecx - 2]
cmp eax, edi
jbe 0x43e644
nop dword [eax]
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x43e63d
cmp ecx, 9
jne 0x43e644
sub eax, 2
cmp eax, edi
ja 0x43e630
xor ecx, ecx
mov word [eax + 2], cx
cmp word [edi], 0
mov esi, 3
je 0x43e69a
xor esi, esi
nop word [eax + eax]
push dword [esi*4 + 0x4d9554]
push edi
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43e69a
inc esi
cmp esi, 4
jne 0x43e660
push dword [esp + 0x4ac]
mov ecx, ebp
push 0x4d4b44
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
cmp word [ebx], 0
mov edi, 2
je 0x43e6e4
xor edi, edi
nop word [eax + eax]
push dword [edi*4 + 0x4d9544]
push ebx
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43e6e4
inc edi
cmp edi, 4
jne 0x43e6b0
push ebx
push 0x4d78f0
mov ecx, ebp
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
test esi, esi
je 0x43e6ed
cmp esi, 3
jne 0x43e6f3
mov dword [0x4e8ce8], edi
cmp esi, 1
je 0x43e6fd
cmp esi, 3
jne 0x43e703
mov dword [0x4e4d6c], edi
cmp esi, 2
je 0x43e711
cmp esi, 3
jne 0x43ddea
mov dword [0x4e480c], edi
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0x4d791c
push esi
call fcn.0049ee91
add esp, 8
test eax, eax
jne 0x43dbea
test edi, edi
jne 0x43e761
push 0x4ceea8
push 0x4d76a8
mov ecx, ebp
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push 0xa
push 0x4cf024
push edi
call fcn.0049f012
add esp, 0xc
test eax, eax
jne 0x43e838
movzx eax, word [edi + 0x14]
test ax, ax
je 0x43ddea
cmp eax, 0x20
je 0x43e794
cmp eax, 9
jne 0x43e838
lea ebx, [edi + 0x16]
mov ecx, ebx
nop dword [eax]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x43e7ad
cmp eax, 9
jne 0x43e7b2
add ecx, 2
jmp 0x43e7a0
test ax, ax
je 0x43ddea
mov ebx, ecx
mov edx, eax
nop
cmp dx, 0x20
je 0x43e7da
cmp dx, 9
je 0x43e7da
movzx eax, word [ebx + 2]
add ebx, 2
mov edx, eax
test ax, ax
jne 0x43e7c0
mov esi, ebx
mov eax, 0x20
sub esi, ecx
sar esi, 1
inc esi
cmp esi, 0x20
cmova esi, eax
lea eax, [esp + 0x28]
dec esi
push esi
push ecx
push eax
call fcn.004aa484
add esp, 0xc
xor eax, eax
mov word [esp + esi*2 + 0x28], ax
lea eax, [esp + 0x28]
push 0x4d7930
push eax
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x43e797
push 0
lea edx, [esp + 0x2c]
mov ecx, 0x4be514
call fcn.00484260
add esp, 4
test eax, eax
jne 0x43e797
push dword [ebp + 0x6c4]
lea eax, [esp + 0xac]
push 0x4d7930
push 0x4be514
push 0x4cf024
push edi
push 0x4d7958
push 0x200
push eax
call fcn.00481800
add esp, 0x20
lea eax, [esp + 0xa8]
mov ecx, ebp
push 0x4ceea8
push eax
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
test edi, edi
jne 0x43e8a7
push ebx
push 0x4d76a8
mov ecx, ebp
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
movzx eax, word [edi]
mov ecx, eax
cmp eax, 0x22
je 0x43e8b8
mov edx, ecx
cmp eax, 0x27
jne 0x43e8dc
lea esi, [edi + 2]
push 0
push esi
call fcn.0049ca21
movzx ecx, word [edi]
add esp, 8
mov edx, ecx
cmp word [eax - 2], cx
jne 0x43e8dc
xor ecx, ecx
mov edi, esi
mov word [eax - 2], cx
movzx edx, word [esi]
movzx eax, dx
mov dword [esp + 0x10], eax
test ax, ax
jne 0x43e906
push 0x4ceea8
push 0x4d4b44
mov ecx, ebp
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
cmp eax, 0x2a
jne 0x43e94d
movzx eax, word [edi + 2]
mov edx, eax
mov esi, eax
and eax, 0xffdf
add edx, 0xffffff9f
movzx ecx, ax
cmp dx, 0x19
mov eax, esi
cmova ecx, eax
cmp cx, 0x49
jne 0x43e949
movzx eax, word [edi + 4]
cmp eax, 0x20
je 0x43e93b
cmp eax, 9
jne 0x43e949
movzx eax, word [edi + 6]
add edi, 6
mov byte [esp + 0x10], 1
jmp 0x43e955
mov eax, dword [esp + 0x10]
mov byte [esp + 0x10], 0
movzx eax, ax
cmp ax, 0x3c
jne 0x43ea03
push 0x3e
push edi
call fcn.0049ca21
mov esi, eax
add esp, 8
test esi, esi
je 0x43ea03
cmp word [esi + 2], 0
jne 0x43ea03
xor eax, eax
add edi, 2
mov word [esi], ax
call fcn.004502d0
mov dword [esp + 0x14], eax
mov ecx, esi
lea eax, [esp + 0x1b]
sub ecx, edi
push eax
lea eax, [esp + 0x1e]
sar ecx, 1
push eax
push ecx
push edi
mov ecx, ebp
call fcn.004434c0
mov edi, dword [esp + 0x14]
test edi, edi
je 0x43e9c1
push edi
call dword [sym.imp.KERNEL32.DLL_SetCurrentDirectoryW]
push edi
call fcn.0049ef92
add esp, 4
mov al, byte [esp + 0x1a]
test al, al
jne 0x43e9dd
cmp byte [esp + 0x1b], al
jne 0x43ddea
cmp byte [esp + 0x10], al
jne 0x43ddea
mov ecx, 0x3e
mov word [esi], cx
test al, al
jne 0x43ea14
push ebx
push 0x4d76d4
mov ecx, ebp
call fcn.0040d660
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
push edi
lea eax, [esp + 0x28]
mov ecx, ebp
push eax
call fcn.0044c250
test eax, eax
jne 0x43ea23
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
mov esi, dword [esp + 0x24]
push esi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x43ea5b
test al, 0x10
je 0x43ea5b
push esi
call fcn.00450220
add esp, 4
push esi
call fcn.0049ef92
mov eax, 3
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
call fcn.004502d0
push dword [esp + 0x10]
mov ecx, ebp
mov ebx, eax
push dword [esp + 0x18]
push esi
call fcn.0043b0e0
neg eax
sbb edi, edi
and edi, 3
test ebx, ebx
je 0x43ea8d
push ebx
call dword [sym.imp.KERNEL32.DLL_SetCurrentDirectoryW]
push ebx
call fcn.0049ef92
add esp, 4
push esi
call fcn.0049ef92
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x498
ret 4
call fcn.0040dbe0
int3