Function at 0x423441
Capabilities:
Get file attributes

Disassembly:
push 0x14
mov eax, 0x4ba6ff
call fcn.0048ff32
mov esi, ecx
mov dword [ebp - 0x18], esi
mov edi, 0x4eb630
xor ebx, ebx
push edi
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], ebx
call fcn.004044ee
push edi
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.004044ee
push ecx
mov byte [ebp - 4], 2
push ecx
mov ecx, dword [ebp + 8]
call fcn.0042779f
pop ecx
pop ecx
mov dword [esi + 0x20c], eax
test eax, eax
jne 0x423494
mov esi, dword [ebp - 0x10]
jmp 0x423652
push edi
lea ecx, [ebp - 0x14]
call fcn.004044ee
mov edi, dword [ebp + 0xc]
mov byte [ebp - 4], 3
push 0x5c
push dword [edi]
call fcn.004937d5
pop ecx
pop ecx
test eax, eax
je 0x4234e7
sub eax, dword [edi]
sar eax, 1
cmp eax, 0xffffffff
je 0x4234e7
inc eax
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
call fcn.0040dc50
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.00406bd9
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00404f8d
jmp 0x4234f0
push edi
lea ecx, [ebp - 0x14]
call fcn.00406bd9
mov eax, dword [0x4f0f60]
mov esi, dword [0x4f0f5c]
cmp esi, eax
je 0x42351b
mov edi, eax
mov ecx, dword [esi]
sub ecx, 0x10
call fcn.00404f8d
add esi, 4
cmp esi, edi
jne 0x423501
mov esi, dword [0x4f0f5c]
mov edi, dword [ebp + 0xc]
mov dword [0x4f0f60], esi
push dword [edi]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x423625
push edi
lea ecx, [ebp - 0x10]
call fcn.00406bd9
mov esi, dword [ebp - 0x10]
cmp dword [esi - 4], 1
jle 0x423551
push dword [esi - 0xc]
lea ecx, [ebp - 0x10]
call fcn.00404d60
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
add eax, 4
mov edx, eax
mov ecx, esi
mov dword [ebp + 0xc], eax
sub edx, esi
movzx eax, word [ecx]
mov word [edx + ecx], ax
lea ecx, [ecx + 2]
test ax, ax
jne 0x423560
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.004070cc
cmp dword [esi - 4], 1
jle 0x42358d
push dword [esi - 0xc]
lea ecx, [ebp - 0x10]
call fcn.00404d60
mov esi, dword [ebp - 0x10]
push ebx
push 0x42309a
mov ecx, esi
call fcn.004230f0
mov edi, dword [0x4f0f5c]
pop ecx
pop ecx
mov ecx, dword [0x4f0f60]
mov eax, ecx
sub eax, edi
test eax, 0xfffffffc
je 0x423620
cmp edi, ecx
je 0x42361b
mov ecx, dword [ebp + 0xc]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x4235bd
sub ecx, edx
sar ecx, 1
mov dword [ebp - 0x1c], ecx
mov ecx, edi
call fcn.00411fe9
mov ecx, dword [ebp - 0x1c]
inc ecx
lea ebx, [eax + ecx*2]
push ebx
call fcn.0040481a
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x14]
call fcn.004047a1
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push ecx
push ecx
push dword [edi]
mov ecx, dword [eax + 0x20c]
call fcn.004278bb
add esp, 0xc
test eax, eax
jne 0x42367a
add edi, 4
push eax
pop ebx
cmp edi, dword [0x4f0f60]
jne 0x4235b7
xor ebx, ebx
jmp 0x423640
mov eax, dword [ebp + 0xc]
jmp 0x423640
or ebx, 0xffffffff
jmp 0x423647
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
push ecx
push ecx
push dword [edi]
mov ecx, dword [eax + 0x20c]
call fcn.004278bb
mov esi, dword [ebp - 0x10]
add esp, 0xc
test eax, eax
jne 0x423647
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00404f8d
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.00404f8d
lea ecx, [esi - 0x10]
call fcn.00404f8d
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00404f8d
mov eax, ebx
call fcn.0048ff00
ret 8
xor ebx, ebx
jmp 0x423647