Function at 0x421c30
Capabilities:
Get file attributes
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x447ac0
push 0x423b60
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 4], ebx
cmp dword [0x483d74], ebx
jne 0x421dc6
xor edi, edi
mov dword [ebp - 0x2c], edi
cmp dword [0x483d6c], ebx
je 0x421c85
push str.IsolationAware_function_called_after_IsolationAwareCleanup_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [0x483d74], ebx
jne 0x421d8c
cmp dword [0x483d6c], ebx
jne 0x421ca6
call fcn.00407570
test eax, eax
je 0x421d94
mov ebx, dword [0x451140]
mov dword [ebp - 0x44], ebx
xor esi, esi
mov dword [ebp - 0x34], esi
mov eax, dword [0x48af10]
cmp eax, esi
jne 0x421d7b
mov dword [ebp - 0x38], esi
cmp dword [0x48af14], esi
jne 0x421cfe
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, 0x80000000
je 0x421cf4
push str.___.___
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push str.Unicows.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x48af18], eax
mov dword [0x48af14], 1
mov eax, dword [0x48af18]
test eax, eax
je 0x421d1c
push str.ActivateActCtx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp - 0x38], esi
test esi, esi
jne 0x421d6d
mov eax, dword [0x48af1c]
mov dword [ebp - 0x3c], eax
test eax, eax
jne 0x421d5c
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, 0x80000000
je 0x421d43
mov eax, dword [str.Kernel32.dll]
push eax
call dword [0x4429b8]
jmp 0x421d50
mov ecx, dword [0x4429c4]
push ecx
call dword [0x4429bc]
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x421d6d
mov dword [0x48af1c], eax
push str.ActivateActCtx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], esi
mov eax, esi
mov dword [0x48af10], eax
test esi, esi
je 0x421d85
lea edx, [ebp - 0x24]
push edx
push ebx
call eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x48], eax
test eax, eax
je 0x421d94
mov edi, 1
mov dword [ebp - 0x2c], edi
xor ebx, ebx
cmp edi, ebx
jne 0x421dbb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x30], eax
cmp eax, 0x7f
je 0x421dad
cmp eax, 0x78
jne 0x421dbb
mov edi, 1
mov dword [0x483d74], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x20], edi
cmp edi, ebx
je 0x421e75
xor esi, esi
mov dword [ebp - 0x4c], esi
cmp dword [0x48af14], ebx
jne 0x421e05
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, 0x80000000
je 0x421dfb
push str.___.___
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push str.Unicows.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x48af18], eax
mov dword [0x48af14], 1
mov eax, dword [0x48af18]
cmp eax, ebx
je 0x421e22
mov ecx, dword [ebp + 8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp - 0x4c], esi
cmp esi, ebx
jne 0x421e72
mov eax, dword [0x48af2c]
mov dword [ebp - 0x50], eax
cmp eax, ebx
jne 0x421e62
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, 0x80000000
je 0x421e4a
mov edx, dword [0x447ab8]
push edx
call dword [0x447ab0]
jmp 0x421e56
mov eax, dword [str.Comctl32.dll]
push eax
call dword [0x447ab4]
mov dword [ebp - 0x50], eax
cmp eax, ebx
je 0x421e72
mov dword [0x48af2c], eax
mov ecx, dword [ebp + 8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 4], 0xffffffff
call fcn.00421e97
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4