Function at 0x9245b0
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xe5c
mov eax, dword [0xb196ec]
xor eax, esp
mov dword [esp + 0xe58], eax
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
lea eax, [esp + 0x15d]
push ebx
push eax
mov esi, ecx
mov byte [esp + 0x164], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x3ff
lea ecx, [esp + 0x265]
push ebx
push ecx
mov byte [esp + 0x26c], bl
call fcn.00a7ffb0
add esp, 0xc
push 0x3ff
lea edx, [esp + 0xa65]
push ebx
push edx
mov byte [esp + 0xa6c], bl
call fcn.00a7ffb0
add esp, 0xc
mov dword [esp + 0x14], 0x400
cmp esi, ebx
je 0x924bc4
cmp byte [esi], bl
je 0x924bc4
lea edx, [esp + 0x260]
mov eax, esi
sub edx, esi
jmp 0x924650
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x924650
push 0xaa1543
lea eax, [esp + 0x264]
push 0xaaac60
push eax
call fcn.0095e130
lea ecx, [esp + 0x26c]
add esp, 0xc
push ecx
call fcn.0095ad70
add esp, 4
push str.WhlPacString
lea eax, [esp + 0x18]
lea edi, [esp + 0xa64]
mov ecx, str.SOFTWAREMicroWorldeScan_for_Windows
mov edx, 0x80000002
call fcn.0094c020
test al, al
je 0x924723
mov al, byte [esp + 0xa60]
cmp al, bl
je 0x924723
cmp al, 0x2a
je 0x924bc4
lea edx, [esp + 0x10]
mov eax, edi
push edx
mov dword [esp + 0x14], ebx
push eax
mov bl, 0x2c
lea edi, [esp + 0x668]
call fcn.0095ae80
or esi, 0xffffffff
add esp, 8
cmp dword [esp + 0x10], esi
je 0x92471f
lea eax, [esp + 0x260]
lea ecx, [esp + 0x660]
call fcn.0094c330
test eax, eax
je 0x924bc4
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0xa64]
push edx
mov bl, 0x2c
lea edi, [esp + 0x668]
call fcn.0095ae80
add esp, 8
cmp dword [esp + 0x10], esi
jne 0x9246e0
xor ebx, ebx
jmp 0x924726
or esi, 0xffffffff
lea eax, [esp + 0x260]
push 0xaaad84
push eax
call fcn.00a7a220
add esp, 8
test eax, eax
jne 0x924773
lea ecx, [esp + 0x260]
push ecx
lea edx, [esp + 0xa64]
push str.http:___s
push edx
call fcn.00a78f30
add esp, 0xc
xor eax, eax
mov edi, edi
mov cl, byte [esp + eax + 0xa60]
mov byte [esp + eax + 0x260], cl
inc eax
cmp cl, bl
jne 0x924760
lea eax, [esp + 0x260]
push 0xaaad84
push eax
call fcn.00a7a220
add eax, 2
lea edx, [esp + 0xa68]
add esp, 8
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x924794
lea ecx, [esp + 0xa60]
push 0x2f
push ecx
call fcn.00a7aa50
add esp, 8
test eax, eax
jne 0x924803
lea eax, [esp + 0x260]
add eax, esi
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x9247c0
mov edx, dword [str._proxy.pac]
mov ecx, dword [0xae3290]
mov dword [eax], edx
mov dx, word [0xae3294]
mov dword [eax + 4], ecx
mov cl, byte [0xae3296]
mov word [eax + 8], dx
mov byte [eax + 0xa], cl
xor eax, eax
nop
mov cl, byte [esp + eax + 0x260]
mov byte [esp + eax + 0xa60], cl
inc eax
cmp cl, bl
jne 0x9247f0
lea edx, [esp + 0xa60]
push 0x2f
push edx
call fcn.00a7aa50
add esp, 8
cmp eax, ebx
je 0x924856
inc eax
push 0x2e
push eax
call fcn.00a7a2c0
add esp, 8
test eax, eax
jne 0x924856
lea eax, [esp + 0x260]
add eax, esi
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x924832
mov ecx, dword [str.proxy.pac]
mov edx, dword [0xae329c]
mov dword [eax], ecx
mov cx, word [0xae32a0]
mov dword [eax + 4], edx
mov word [eax + 8], cx
mov eax, str.file:__
lea ecx, [esp + 0x260]
call fcn.0094c3e0
test eax, eax
je 0x924892
lea ecx, [esp + 0x260]
call fcn.0085a880
test eax, eax
je 0x9248e5
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xe58]
xor ecx, esp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret
mov eax, str.file:__
inc eax
cmp byte [eax], bl
jne 0x924897
sub eax, str.file:__
lea eax, [esp + eax + 0x260]
lea edx, [esp + 0x158]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x9248b1
push 0xaa1564
lea edx, [esp + 0x15c]
push 0xaa1560
push edx
call fcn.0095e130
lea eax, [esp + 0x164]
add esp, 0xc
push eax
call fcn.0095ad70
add esp, 4
lea ecx, [esp + 0x260]
push 0x2e
push ecx
call fcn.00a7aa50
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x92487b
mov eax, str..ins
mov ecx, edi
call fcn.0094c330
test eax, eax
je 0x924925
mov eax, str..pac
mov ecx, edi
call fcn.0094c330
test eax, eax
jne 0x92487b
cmp byte [esp + 0x158], bl
je 0x924a17
push 0x13c
lea edx, [esp + 0x20]
push ebx
push edx
mov dword [esp + 0x24], ebx
call fcn.00a7ffb0
add esp, 0xc
lea eax, [esp + 0x18]
push ebx
push eax
lea edx, [esp + 0x18]
lea ecx, [esp + 0x160]
mov dword [esp + 0x18], ebx
call fcn.0095a0f0
add esp, 8
test eax, eax
jne 0x92487b
lea ecx, [esp + 0x158]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, esi
je 0x924984
test al, 6
jne 0x9249f0
push ebx
lea edx, [esp + 0x15c]
push str._temp
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, esi
jne 0x9249f0
push ebx
lea eax, [esp + 0x15c]
push str._startup_
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, esi
jne 0x9249f0
push ebx
lea ecx, [esp + 0x15c]
push str.locallow_
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, esi
jne 0x9249f0
push ebx
lea edx, [esp + 0x15c]
push str._roaming_
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, esi
je 0x924bc4
lea edx, [esp + 0x158]
call fcn.00924540
neg eax
sbb eax, eax
neg eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xe58]
xor ecx, esp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret
lea esi, [esp + 0x260]
call 0x9262f0
push 7
mov eax, str.http:__
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x924a4c
push 0x64
lea eax, [esp + 0x26b]
push eax
lea ecx, [esp + 0x668]
push ecx
jmp 0x924a8a
push 8
mov eax, str.https:__
lea ecx, [esp + 0x264]
call fcn.0094c380
add esp, 4
push 0x64
test eax, eax
jne 0x924a7a
lea edx, [esp + 0x26c]
push edx
lea eax, [esp + 0x668]
push eax
jmp 0x924a8a
lea ecx, [esp + 0x264]
push ecx
lea edx, [esp + 0x668]
push edx
call fcn.00a7a620
add esp, 0xc
lea eax, [esp + 0x660]
push 0x2f
push eax
call fcn.00a7aa50
add esp, 8
cmp eax, ebx
je 0x924aaa
mov byte [eax], bl
lea ecx, [esp + 0x660]
push 0x3a
push ecx
call fcn.00a7aa50
add esp, 8
cmp eax, ebx
je 0x924ac2
mov byte [eax], bl
lea edx, [esp + 0x660]
push ebx
push edx
call fcn.00965e80
add esp, 8
test eax, eax
je 0x924b1f
lea eax, [esp + 0x660]
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
call fcn.0096b690
mov esi, eax
mov eax, dword [esp + 0x14]
add esp, 4
cmp eax, ebx
je 0x924b02
push eax
call fcn.00a78fec
add esp, 4
xor eax, eax
cmp esi, 1
sete al
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xe58]
xor ecx, esp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0x660]
push 0x2e
push ecx
call fcn.00a7a2c0
add esp, 8
test eax, eax
je 0x924bc4
push ebx
lea edx, [esp + 0x664]
push 0xae0f3c
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x924bc4
push ebx
lea eax, [esp + 0x664]
push str.lan.
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x924bc4
push ebx
lea ecx, [esp + 0x664]
push str._proxy_
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x924bc4
push ebx
lea edx, [esp + 0x664]
push str..proxy
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x924bc4
push ebx
lea eax, [esp + 0x664]
push str.proxy.
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x92487b
mov ecx, dword [esp + 0xe64]
pop edi
pop esi
pop ebx
xor ecx, esp
mov eax, 1
call fcn.00a78f21
mov esp, ebp
pop ebp
ret