Function at 0x42598d
Capabilities:
Check if file exists
Get file size
Timestomp file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b89c0
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x12ac
call fcn.005a41d0
mov eax, dword [0x61dc40]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
xor esi, esi
mov dword [ebp - 0x1274], eax
xor eax, eax
lea edi, [ebp - 0x12a0]
push 0x206
mov dword [ebp - 0x12a4], esi
stosd dword es:[edi], eax
mov word [ebp - 0x224], ax
lea eax, [ebp - 0x222]
mov ebx, ecx
push esi
push eax
mov dword [ebp - 0x1288], ebx
mov dword [ebp - 0x127c], esi
mov dword [ebp - 0x1294], esi
mov dword [ebp - 0x1278], esi
mov dword [ebp - 0x129c], esi
mov dword [ebp - 0x128c], esi
mov dword [ebp - 0x1270], esi
call fcn.00596530
add esp, 0xc
xor eax, eax
push 0x1046
mov word [ebp - 0x126c], ax
lea eax, [ebp - 0x126a]
push esi
push eax
call fcn.00596530
add esp, 0xc
cmp dword [ebp + 0xc], esi
jne 0x425a82
push 0x5debb4
push dword [ebp - 0x1274]
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
jne 0x425a82
push dword [ebp - 0x1274]
mov ecx, 0x824
push str.http:___s
lea edi, [ebp - 0x126c]
call fcn.00405374
pop ecx
mov eax, edi
pop ecx
mov dword [ebp - 0x1274], eax
cmp ebx, esi
jne 0x425a8c
mov ebx, dword [ebp - 0x1274]
lea eax, [ebp - 0x224]
push eax
call fcn.004258be
pop ecx
test eax, eax
je 0x425bc0
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [ebp - 0x129c], eax
cmp eax, esi
je 0x425bc3
lea eax, [ebp - 0x127c]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.0042bc3c
pop ecx
pop ecx
cmp dword [ebp - 0x127c], esi
jne 0x425b4b
push 0x10
call sub.gdiplus.dll_GdipAlloc
mov edi, eax
cmp edi, esi
je 0x425b13
lea eax, [ebp - 0x1280]
push eax
lea eax, [ebp - 0x224]
push eax
mov dword [edi], vtable.Gdiplus::Bitmap.0
mov dword [ebp - 0x1280], esi
call sub.gdiplus.dll_GdipCreateBitmapFromFile
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x1280]
mov dword [edi + 4], eax
jmp 0x425b15
xor edi, edi
lea eax, [ebp - 0x127c]
cmp edi, esi
je 0x425b39
push eax
push dword [edi + 4]
call sub.gdiplus.dll_GdipCreateHICONFromBitmap
cmp eax, esi
je 0x425b2f
mov dword [edi + 8], eax
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
jmp 0x425b4b
push 1
push eax
push esi
push esi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
cmp dword [ebp + 0xc], esi
je 0x425bc3
push esi
push 0x80
push 3
push esi
push 3
push 0xc0000000
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
mov dword [ebp - 0x1270], ebx
cmp ebx, 0xffffffff
je 0x425bc3
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push esi
mov edi, eax
push esi
lea eax, [ebp - 0x12a4]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x425ba2
mov dword [ebp - 0x1294], 1
cmp edi, esi
jne 0x425bc3
mov dword [ebp - 0x128c], 1
cmp dword [ebp - 0x1288], esi
je 0x425bc3
mov dword [ebp - 0x1294], esi
jmp 0x425bc3
mov dword [ebp + 0xc], esi
mov edi, dword [sym.imp.KERNEL32.dll_SetLastError]
xor ebx, ebx
inc ebx
push ebx
call edi
cmp dword [ebp - 0x1294], esi
je 0x425ca3
lea eax, [ebp - 0x12ac]
push eax
lea eax, [ebp - 0x12a4]
push eax
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
jne 0x425c00
push 0x80070057
call fcn.00407b53
lea eax, [ebp - 0x12ac]
push eax
lea edi, [ebp - 0x1298]
call fcn.0042e9bb
lea eax, [ebp - 0x1284]
push eax
mov dword [ebp - 0x1284], esi
mov dword [ebp - 0x1280], esi
call fcn.005901bf
mov eax, dword [ebp - 0x1280]
pop ecx
mov ecx, dword [ebp - 0x1284]
sub ecx, dword [ebp - 0x1298]
sbb eax, dword [ebp - 0x1294]
js 0x425c59
jg 0x425c4b
cmp ecx, esi
jb 0x425c59
cmp eax, esi
jl 0x425c5f
jg 0x425c59
cmp ecx, 0x15180
jbe 0x425c5f
mov dword [ebp - 0x1278], ebx
cmp dword [ebp - 0x128c], esi
je 0x425c85
cmp eax, esi
jl 0x425c7f
jg 0x425c71
cmp ecx, esi
jb 0x425c7f
cmp eax, esi
jl 0x425c85
jg 0x425c7f
cmp ecx, 0x5460
jbe 0x425c85
mov dword [ebp - 0x1278], ebx
or dword [ebp - 4], 0xffffffff
jmp 0x425cac
push ebx
mov dword [ebp - 0x1278], ebx
call edi
cmp dword [ebp + 0xc], esi
je 0x425dec
cmp dword [ebp - 0x1278], esi
je 0x425dec
cmp dword [ebp + 0x14], esi
je 0x425dec
mov edi, 0x104c
push edi
call fcn.0058f82d
pop ecx
push edi
mov ebx, eax
push esi
push ebx
call fcn.00596530
mov eax, dword [ebp + 0x18]
add esp, 0xc
mov dword [ebx], eax
cmp dword [ebp - 0x1288], esi
je 0x425d03
push dword [ebp - 0x1288]
lea edx, [ebx + 4]
mov ecx, 0x824
call fcn.004054f9
cmp dword [ebp - 0x1270], esi
je 0x425d6b
cmp dword [ebp - 0x1270], 0xffffffff
je 0x425d6b
xor eax, eax
mov word [ebp - 0x12bc], ax
mov dword [ebp - 0x1290], esi
lea edi, [ebp - 0x128c]
stosd dword es:[edi], eax
lea edi, [ebp - 0x12ba]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x12bc]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [ebp - 0x1290]
push eax
lea eax, [ebp - 0x12bc]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push esi
push esi
lea eax, [ebp - 0x1290]
push eax
push dword [ebp - 0x1270]
call dword [sym.imp.KERNEL32.dll_SetFileTime]
cmp dword [ebp - 0x129c], esi
jne 0x425d9e
cmp dword [ebp - 0x1270], esi
jne 0x425da6
push esi
push 0x80
push 1
push esi
push 2
push 0x40000000
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x1270], eax
cmp dword [ebp - 0x1270], esi
je 0x425dc1
cmp dword [ebp - 0x1270], 0xffffffff
je 0x425dc1
push dword [ebp - 0x1270]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1270], esi
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x1274]
push esi
push ebx
push dword [ebp + 0x14]
mov eax, 0x5d0be4
push 0xbb8
push esi
push eax
push eax
push esi
call fcn.0047b304
add esp, 0x20
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [ebp - 0x1270], esi
je 0x425e09
cmp dword [ebp - 0x1270], 0xffffffff
je 0x425e09
push dword [ebp - 0x1270]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x127c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0058f3cf
leave
ret