Function at 0xa50720
Capabilities:
Check if file exists
Set file attributes

Disassembly:
sub esp, 0x360
mov eax, dword [0xb196ec]
xor eax, esp
mov dword [esp + 0x35c], eax
mov eax, dword [esp + 0x364]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x370]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x374]
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x378]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x37c]
push ebx
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x384]
push ebp
mov dword [esp + 0x48], edx
mov edx, dword [eax + 0x10]
xor eax, eax
push esi
mov esi, dword [edx + 0x208]
push edi
mov edi, dword [esp + 0x394]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x3c], esi
mov dword [esp + 0x4c], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x44], eax
cmp esi, eax
je 0xa50be3
cmp edi, eax
je 0xa507be
mov eax, dword [edi]
mov dword [esp + 0x44], eax
mov edx, dword [edx + 0x218]
add dword [ecx], edx
lea eax, [esp + 0x12]
push eax
lea ecx, [esp + 0x17]
push ecx
lea edx, [esp + 0x28]
push edx
lea ebx, [esp + 0x24]
lea edi, [esp + 0x20]
call fcn.00951ad0
mov edi, eax
test edi, edi
je 0xa50b01
lea esp, [esp]
push edi
call fcn.0095ad70
xor ebx, ebx
mov esi, eax
xor ebp, ebp
add esp, 4
mov dword [esp + 0x40], ebp
mov dword [esp + 0x48], ebx
mov dword [esp + 0x28], ebx
cmp esi, 0xc00
jae 0xa50bfc
mov al, byte [edi]
cmp al, 0x23
je 0xa50821
cmp al, 0x3b
jne 0xa5084b
cmp dword [esp + 0x24], 0
mov ebp, 1
mov dword [esp + 0x40], ebp
je 0xa50837
mov ebx, ebp
mov dword [esp + 0x48], ebx
mov eax, str.blankfileonly
mov ecx, edi
call fcn.0094c3e0
test eax, eax
jne 0xa5084b
mov dword [esp + 0x28], ebp
test esi, esi
je 0xa50a97
cmp byte [edi], 0
je 0xa50a97
test ebp, ebp
je 0xa50871
cmp dword [esp + 0x28], 0
jne 0xa50871
test ebx, ebx
je 0xa50a97
jmp 0xa50875
test ebx, ebx
je 0xa508a8
cmp byte [esi + edi - 1], 0x29
jne 0xa50890
push 0x28
push edi
call fcn.00a7aa50
add esp, 8
test eax, eax
je 0xa50890
mov byte [eax], 0
mov edi, edi
mov al, byte [edi]
cmp al, 0x23
je 0xa5089a
cmp al, 0x3b
jne 0xa5089d
inc edi
jmp 0xa50890
push edi
call fcn.0095ad70
add esp, 4
mov esi, eax
mov eax, dword [esp + 0x50]
cmp esi, dword [eax]
jbe 0xa508b2
mov dword [eax], esi
cmp dword [esp + 0x37c], 0
je 0xa509ab
push 0x7c
push edi
xor ebp, ebp
call fcn.00a7a2c0
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0xa50908
mov eax, dword [esp + 0x18]
test eax, eax
je 0xa508e1
mov cl, byte [esp + 0x13]
mov byte [eax], cl
mov eax, dword [esp + 0x20]
test eax, eax
je 0xa508ef
mov dl, byte [esp + 0x12]
mov byte [eax], dl
cmp dword [esp + 0x14], 0
je 0xa50b01
mov eax, dword [esp + 0x14]
push 0xa
mov edi, eax
push eax
jmp 0xa50ac1
mov eax, ebx
sub eax, edi
mov dword [esp + 0x28], eax
je 0xa50976
cmp eax, 0x20
jne 0xa50976
cmp ebx, edi
jbe 0xa5092c
mov ebp, eax
push ebp
lea eax, [esp + 0x5c]
push edi
push eax
call fcn.00a828e0
add esp, 0xc
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x394]
push 1
push ecx
mov ecx, dword [esp + 0x380]
push edx
mov edx, dword [esp + 0x54]
lea eax, [esp + 0x58]
push eax
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x3c]
push eax
inc ebx
push ecx
push edx
sub esi, ebx
add esi, edi
push esi
push ebx
mov byte [esp + ebp + 0x84], 0
push 0x20
lea ecx, [esp + 0x88]
jmp 0xa509da
mov eax, dword [esp + 0x18]
test eax, eax
je 0xa50984
mov cl, byte [esp + 0x13]
mov byte [eax], cl
mov eax, dword [esp + 0x20]
test eax, eax
je 0xa50992
mov dl, byte [esp + 0x12]
mov byte [eax], dl
cmp dword [esp + 0x14], 0
je 0xa50b01
mov eax, dword [esp + 0x14]
push 0xa
mov edi, eax
push eax
jmp 0xa50ac1
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x394]
push 2
push eax
mov eax, dword [esp + 0x380]
push ecx
mov ecx, dword [esp + 0x3c]
lea edx, [esp + 0x58]
push edx
mov edx, dword [esp + 0x34]
push eax
push ebx
push ebp
push ecx
push edx
push 0
push 0
push esi
mov ecx, edi
mov edx, dword [esp + 0x64]
call fcn.00a50370
add esp, 0x30
cmp dword [esp + 0x24], 0
mov esi, eax
je 0xa50a8f
mov eax, dword [esp + 0x394]
mov eax, dword [eax]
xor edx, edx
mov ecx, 0x190
div ecx
test edx, edx
jne 0xa50a8f
push 0x103
push edx
mov byte [esp + 0x60], dl
lea edx, [esp + 0x61]
push edx
call fcn.00a7ffb0
mov edi, dword [esp + 0x38]
mov eax, dword [edi]
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x3c], 1
call fcn.00a4fe60
add esp, 4
test eax, eax
jne 0xa50a5d
cmp dword [0xbde25c], eax
je 0xa50a5d
lea ecx, [esp + 0x58]
push ecx
push str.Error_in_End_Txaction__Reason:__s_n
call fcn.00a7a8b1
add esp, 8
mov edx, dword [edi]
push edx
lea ecx, [esp + 0x5c]
mov byte [esp + 0x5c], 0
call fcn.00a4fd80
add esp, 4
test eax, eax
jne 0xa50a8f
cmp dword [0xbde25c], eax
je 0xa50a8f
lea eax, [esp + 0x58]
push eax
push str.Error_in_Begin_Txaction__Reason:__s_n
call fcn.00a7a8b1
add esp, 8
test esi, esi
je 0xa50cc8
mov eax, dword [esp + 0x18]
test eax, eax
je 0xa50aa5
mov cl, byte [esp + 0x13]
mov byte [eax], cl
mov eax, dword [esp + 0x20]
test eax, eax
je 0xa50ab3
mov dl, byte [esp + 0x12]
mov byte [eax], dl
cmp dword [esp + 0x14], 0
je 0xa50b01
mov edi, dword [esp + 0x14]
push 0xa
push edi
call fcn.00a7a2c0
add esp, 8
test eax, eax
jne 0xa50ad3
mov dword [esp + 0x14], eax
jmp 0xa50af9
mov cl, byte [eax]
mov byte [eax], 0
lea edx, [eax + 1]
mov dword [esp + 0x18], eax
dec eax
cmp byte [eax], 0xd
mov byte [esp + 0x13], cl
mov dword [esp + 0x14], edx
jne 0xa50af9
mov dword [esp + 0x20], eax
mov byte [esp + 0x12], 0xd
mov byte [eax], 0
test edi, edi
jne 0xa507f0
cmp dword [esp + 0x24], 0
je 0xa50baa
cmp dword [esp + 0x38], 0
jne 0xa50baa
mov eax, dword [esp + 0x44]
test eax, eax
jbe 0xa50baa
mov ecx, dword [esp + 0x394]
cmp eax, dword [ecx]
je 0xa50baa
push 0x103
lea edx, [esp + 0x5d]
push 0
push edx
mov byte [esp + 0x64], 0
call fcn.00a7ffb0
mov esi, dword [esp + 0x38]
mov eax, dword [esi]
add esp, 0xc
push eax
lea ecx, [esp + 0x5c]
call fcn.00a4fe60
add esp, 4
test eax, eax
jne 0xa50b78
cmp dword [0xbde25c], eax
je 0xa50b78
lea ecx, [esp + 0x58]
push ecx
push str.Error_in_End_Txaction__Reason:__s_n
call fcn.00a7a8b1
add esp, 8
mov edx, dword [esi]
push edx
lea ecx, [esp + 0x5c]
mov byte [esp + 0x5c], 0
call fcn.00a4fd80
add esp, 4
test eax, eax
jne 0xa50baa
cmp dword [0xbde25c], eax
je 0xa50baa
lea eax, [esp + 0x58]
push eax
push str.Error_in_Begin_Txaction__Reason:__s_n
call fcn.00a7a8b1
add esp, 8
mov esi, dword [esp + 0x1c]
cmp byte [esi], 0
je 0xa50bcc
mov eax, esi
call fcn.0095a560
cmp eax, 0xffffffff
je 0xa50bcc
test al, 0x20
je 0xa50bcc
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.00a78fec
add esp, 4
mov dword [esi + 0x208], 0
mov ecx, dword [esp + 0x36c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00a78f21
add esp, 0x360
ret
cmp dword [0xbde25c], 0
je 0xa50c24
push esi
push str.Very_long_record_size:__d_n
call fcn.00a7a8b1
mov esi, dword [esp + 0x24]
push esi
push str._SQT__Error_reading__s__2___Deleting...
call fcn.00a7a8b1
add esp, 0x10
jmp 0xa50c28
mov esi, dword [esp + 0x1c]
push esi
push str._SQT__Error_reading__s__2___Deleting...
push 0
call fcn.0096a780
add esp, 0xc
mov eax, esi
call fcn.0094dd20
push 0x103
lea eax, [esp + 0x5d]
push 0
push eax
mov byte [esp + 0x64], 0
call fcn.00a7ffb0
add esp, 0xc
lea ecx, [esp + 0x58]
call fcn.00987d50
cmp byte [esp + 0x58], 0
jne 0xa50c91
lea ecx, [esp + 0x58]
push str.__ESCANDRIVE__pubupdate
push ecx
call fcn.00a78f30
add esp, 8
push 1
lea edx, [esp + 0x5c]
push edx
call fcn.00977760
cmp byte [esp + 0x58], 0
je 0xa50b01
lea ecx, [esp + 0x58]
call fcn.00960910
push 0x5c
push esi
call fcn.00a7aa50
add esp, 8
test eax, eax
je 0xa50cac
inc eax
jmp 0xa50cae
mov eax, esi
push eax
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [esp + 0x58]
call fcn.0094dd20
jmp 0xa50b01
push 0x207
lea ecx, [esp + 0x165]
push 0
push ecx
mov byte [esp + 0x16c], 0
call fcn.00a7ffb0
mov ebx, dword [esp + 0x38]
mov edx, dword [ebx]
add esp, 0xc
push edx
xor ebp, ebp
call fcn.00a4def0
mov edi, dword [esp + 0x20]
mov esi, eax
add esp, 4
test esi, esi
je 0xa50d5b
push esi
push edi
lea eax, [esp + 0x168]
push str.SQStep_2__Failed___s___Reason:__s
push eax
call fcn.00a78f30
add esp, 0x10
cmp dword [0xc09f44], ebp
jne 0xa50d41
lea ecx, [esp + 0x160]
push ecx
push str._SQT___s
push ebp
call fcn.0096a780
add esp, 0xc
mov dword [0xc09f44], 1
push 0
push str.disk_image_is_malformed
push esi
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0xa50d5b
mov ebp, 1
mov edx, dword [ebx]
push edx
lea ecx, [esp + 0x164]
call fcn.00a4fe60
mov eax, dword [esp + 0x38]
add esp, 4
test eax, eax
je 0xa50d7e
push eax
call fcn.00a06130
add esp, 4
mov eax, dword [esp + 0x24]
test eax, eax
je 0xa50d8f
push eax
call fcn.00a06130
add esp, 4
mov eax, dword [esp + 0x30]
test eax, eax
je 0xa50da0
push eax
call fcn.00a06130
add esp, 4
mov eax, dword [ebx]
push eax
call fcn.00a4ff60
add esp, 4
mov dword [ebx], 0
cmp byte [edi], 0
je 0xa50dcf
mov eax, edi
call fcn.0095a560
cmp eax, 0xffffffff
je 0xa50dcf
test al, 0x20
je 0xa50dcf
push 0
push edi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.00a78fec
add esp, 4
mov dword [edi + 0x208], 0
test ebp, ebp
je 0xa50be3
mov ebx, dword [esp + 0x54]
test ebx, ebx
je 0xa50be3
add ebx, 4
cmp byte [ebx], 0
je 0xa50be3
mov eax, ebx
call fcn.0094dd20
test eax, eax
je 0xa50e26
push ebx
push str._SQT__Successfully_Deleted_File:__s
push 0
call fcn.0096a780
add esp, 0xc
jmp 0xa50be3
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 2
je 0xa50be3
push str._SQT__Stopping_econceal_services...
push 0
call fcn.0096a780
push str.econser.exe__econceal.exe
call fcn.0095be10
add esp, 0xc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, ebx
call fcn.0094dd20
test eax, eax
je 0xa50e85
push ebx
push str._SQT__Successfully_Deleted_File_A_:__s
push 0
call fcn.0096a780
add esp, 0xc
mov ecx, str.econservice
call fcn.00960370
jmp 0xa50be3
push 0x103
lea edx, [esp + 0x5d]
push 0
push edx
mov byte [esp + 0x64], 0
call fcn.00a7ffb0
add esp, 0xc
call esi
push 0x104
mov edi, eax
lea esi, [esp + 0x5c]
call fcn.00960a40
add esp, 4
mov eax, esi
push eax
push ebx
push str._SQT__Error_Deleting_File:__s__Reason:__s
push 0
call fcn.0096a780
push 1
mov eax, ebx
call fcn.0095aa00
add esp, 0x14
mov ecx, str.econservice
call fcn.00960370
jmp 0xa50be3